---
title: Configuring an MFA form
description: You can use forms created in User Experience > Forms to allow users to register and authenticate with multi-factor authentication (MFA), by one-time passcode (OTP), FIDO2, or an authenticator app.
component: pingone
page_id: pingone:user_experience:p1_configuring_mfa_form
canonical_url: https://docs.pingidentity.com/pingone/user_experience/p1_configuring_mfa_form.html
revdate: April 3, 2025
section_ids:
  creating-an-mfa-form-with-otp: Creating an MFA form with OTP
  steps: Steps
  result: Result
  creating-an-mfa-form-with-fido2-registration: Creating an MFA form with FIDO2 registration
  steps-2: Steps
  creating-an-mfa-form-with-fido2-authentication: Creating an MFA form with FIDO2 authentication
  steps-3: Steps
  creating-an-mfa-form-with-the-authenticator-app: Creating an MFA form with the authenticator app
  steps-4: Steps
  result-2: Result
---

# Configuring an MFA form

You can use forms created in **User Experience > Forms** to allow users to register and authenticate with multi-factor authentication (MFA) *(tooltip: \<div class="paragraph">
\<p>An electronic authentication method where a user is granted access only after presenting two or more verification factors for authentication.\</p>
\</div>)*, by one-time passcode (OTP) *(tooltip: \<div class="paragraph">
\<p>A passcode valid for only one sign-on or transaction on a computer system or other digital device. Also known as a one-time password, one-time PIN, or dynamic password.\</p>
\</div>)*, FIDO2, or an authenticator app.

## Creating an MFA form with OTP

To create an MFA form for registration or authentication with OTP:

### Steps

1. In the PingOne admin console, go to **User Experience > Forms**.

2. Click the **[icon: plus, set=fa]**icon and select one of the following OTP templates:

   * **Email OTP Prompt - Registration**

   * **Email OTP Prompt - Authentication**

   * **SMS OTP Prompt - Registration**

   * **SMS OTP Prompt - Authentication**

   * **Voice OTP Prompt - Registration**

   * **Voice OTP Prompt - Authentication**

3. (Optional) Customize the templated form in the form builder.

4. Click **Save**.

### Result

You can now use the form in your DaVinci flow with the [Form connector](https://docs.pingidentity.com/connectors/form_connector.html).

## Creating an MFA form with FIDO2 registration

To configure FIDO2 in PingOne Forms for registration:

### Steps

1. Create a FIDO2 form:

   1. In the PingOne admin console, go to **User Experience > Forms**.

   2. Click the **[icon: plus, set=fa]**icon and select the **FIDO2 - Registration** template.

   3. (Optional) Customize the templated form in the form builder.

   4. Click **Save**.

2. In DaVinci, configure the flow.

   ![A DaVinci FIDO2 MFA flow. This first Form connector is set to Create Device, followed by a Form connector using Show Form with FIDO2 Registration selected. The final Form connector is set to Activate Device.](_images/p1-forms-fido2-registration.png)

   1. Add a PingOne MFA connector node and select the **Create Device** capability.

      |   |                                                                                                           |
      | - | --------------------------------------------------------------------------------------------------------- |
      |   | This connector is necessary for **Public Key Credential Creation** field in the following Form connector. |

   2. In a subsequent node, add a Form connector and select the **Show Form** capability, then select the FIDO2 registration form you created in **User Experience > Forms**.

   3. In a subsequent node, add another PingOne MFA node and select the **Activate Device** capability.

## Creating an MFA form with FIDO2 authentication

To configure FIDO2 in PingOne Forms for authentication:

### Steps

1. Create a FIDO2 form:

   1. In the PingOne admin console, go to **User Experience > Forms**.

   2. Click the **[icon: plus, set=fa]**icon and select the **FIDO2 - Authentcation** template.

2. (Optional) Customize the templated form in the form builder.

3. Click **Save**.

4. Configure the DaVinci flow.

   ![A DaVinci FIDO2 MFA flow. The first Form connector is set to Create Device Authentication, followed by a Form connector using Show Form with FIDO2 Authentication selected. The final Form connector is set to FIDO Assertion.](_images/p1-forms-fido2-authentication.png)

   1. In your PingOne DaVinci flow, add a PingOne MFA connector and select the **Create Device Authentication** capability.

      |   |                                                                                                              |
      | - | ------------------------------------------------------------------------------------------------------------ |
      |   | This connector is necessary for the **Public Key Credential Request** field in the following Form connector. |

   2. In a subsequent node, add a Form connector and select the **Show Form** capability, then select the FIDO2 authentication form you created in **User Experience > Forms**.

   3. In a subsequent node, add another PingOne MFA node and select the **FIDO Assertion** capability.

## Creating an MFA form with the authenticator app

To create a simple registration or authentication form with an authenticator app prompt:

### Steps

1. In the PingOne admin console, go to **User Experience > Forms**.

2. Click the **[icon: plus, set=fa]**icon and select either the **Authenticator App Prompt - Registration** or **Authenticator App Prompt - Authentication** form.

3. (Optional) Customize the templated form in the form builder.

4. Click **Save**.

### Result

You can now use the form in your DaVinci flow with the [Form connector](https://docs.pingidentity.com/connectors/form_connector.html).