---
title: Configuring strong authentication methods (MFA)
description: How to configure PingOne MFA methods including FIDO2, PingID mobile app, authenticator apps, SMS, email, OATH tokens, and WhatsApp.
component: pingone
page_id: pingone:strong_authentication_mfa:p1_configuring_strong_authentication_start
canonical_url: https://docs.pingidentity.com/pingone/strong_authentication_mfa/p1_configuring_strong_authentication_start.html
llms_txt: https://docs.pingidentity.com/pingone/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: August 31, 2026
page_aliases: ["p1_mfa_landing.adoc", "getting_started_with_pingone:p1_mfa_landing.adoc", "mfa_for_workforce_pingid:p1_p1pid_start.adoc", "p1_mfa_applying_mfa_only_policy.adoc", "ROOT:p1mfa__introduction.adoc", "getting_started_with_pingone:p1_mfa_configuring_sign_on_policy.adoc", "getting_started_with_pingone:p1_mfa_enrolling_user_authentication_device.doc", "getting_started_with_pingone:p1_mfa_mfa_mfa_using_mobile_application.adoc", "getting_started_with_pingone:p1_mfa_updating_mfa_sign_on_policy.adoc"]
section_ids:
  which-authentication-method-do-you-want-to-add: Which authentication method do you want to add?
---

# Configuring strong authentication methods (MFA)

This section describes the requirements, limitations, and configurations that are available for each authentication method.

To add an authentication method make sure you have already created:

* A PingOne account with the relevant services (Workforce or Customer).

## Which authentication method do you want to add?

Configure the authentication methods with which your users can authenticate. All methods are enabled and configured in the multi-factor authentication (MFA) policy, but some authentication methods require additional configuration steps outside of the MFA policy. You can find details in the relevant sections:

* Workforce and Customer options:

  * [FIDO2 (Passkeys)](p1_strong_auth_configuring_fido.html)

  * [Authenticator app](p1_strong_auth_configuring_authenticator_app.html)

  * [Email](p1_strong_auth_email.html)

  * [SMS or voice](p1_strong_auth_sms_voice_authentication.html)

  * [OATH token](p1_pid_oath_tokens.html)

  * [Native mobile application](../applications/p1_edit_application_native.html)

    |   |                                                                                                                    |
    | - | ------------------------------------------------------------------------------------------------------------------ |
    |   | For Workforce environments, native mobile applications are only available in the Singapore and Canada geographies. |

* Workforce only:

  * [PingID mobile app](p1_configuring_pid_mobile_application.html)

  * [YubiKey](p1_pid_yubikey.html)

  * [PingID desktop app](p1_pid_desktop_app_start.html)

  * [PingID desktop app (legacy)](p1_pid_desktop_app_v1.html)

* Customer only:

  * [WhatsApp authentication](p1-strong-auth_whatsapp.html)

For Workforce environments, after configuring the relevant authentication methods, you can create and apply a [registration and authentication policy](p1_configuring_pid_policy.html).