Using MyAccount to manage PingID devices (Workforce only)

Configure self-service options to allow your PingID users to manage their devices using the MyAccount app.

About this task

This section show you how to configure MyAccount to allow PingID workforce users from environments that are converged with PingOne to manage their devices.

Learn more about self-service configuration in Self Service.
Learn how to require users to perform multi-factor authentication (MFA) to manage MyAccount for customer use cases.

Steps

In the PingOne admin console, go to User Experience > Self Service and select Edit.

Select Manage Authentication and then select Manage PingID Devices via MyAccount.

Selecting Manage PingID Devices via My account also:
- Enables the Allow user actions according to granted authentication scopes option in the MyAccount app Resources tab. This option provides users with a limited set of scopes until they authenticate.
- Adds the MyAccount app to all PingID policies that already include device management.
To allow PingID users to manage their account with limited scopes, you must also ensure an MFA policy or MFA DaVinci flow policy is added to the MyAccount app.
- Learn more about adding a policy to the app in Associating an authentication policy with a web app.
- Learn more about disabling reduced scopes in Editing scopes for an application.
- You can find information about PingOne API scopes and their function in PingOne self-management scopes in the PingOne API documentation.
The ability to pre-populate information for SMS, Voice, and email authentication isn’t supported by MyAccount.