(Workforce only) Configuring the PingID desktop application

This section documents the new PingID desktop application.

To understand the difference between the PingID desktop app and the PingID desktop app (legacy), go to PingID desktop app (workforce only).
For the legacy PingID desktop application, go to PingID desktop app (legacy).

PingID desktop app provides users with a consistent passwordless authentication experience across different browsers from a Mac or Windows machine using the machine’s device biometrics.

What’s involved?

Configuring PingID desktop app as an authentication method involves several steps.

1. Before you begin

Review the requirements and limitations for PingID desktop app.

2. Configure PingOne

In the relevant PingOne environment:

Enable and configure PingID desktop app as an authentication method.
Configure a targeted PingOne risk policy, and select the MFA policy you want to apply to authentication and registration flows.
- If you have a PingOne Protect license, go to Configuring a targeted PingOne risk policy.
- If you have an MFA-only license, go to Creating a risk policy with an MFA-only license.

3. Configure additional components:

When using DaVinci:

Configure the DaVinci authentication subflow to use PingOne risk policy
When using PingFederate:

Configure a PingFederate policy for a consistent passwordless experience
(Optional) Browser configurations:

To ensure a seamless passwordless sign-in experience for users authenticating from common browsers, do the following:
- Suppress the Local Network Access Prompt.
- (macOS only): Configure PingID desktop app for Safari on macOS

4. Install the PingID desktop app

Install the PingID desktop app using the CLI or UI.

Troubleshooting

Find troubleshooting information in Troubleshooting PingID desktop app.