---
title: Manage devices for MFA
description: Multi-factor authentication (MFA) requires you to register a device, which is used as an additional factor when you log in to Advanced Identity Cloud.
component: pingoneaic
page_id: pingoneaic:am-authentication:authn-mfa-devices
canonical_url: https://docs.pingidentity.com/pingoneaic/am-authentication/authn-mfa-devices.html
keywords: ["Authentication", "Multi-factor Authentication (MFA)"]
page_aliases: ["authentication-guide:authn-mfa-devices.adoc"]
---

# Manage devices for MFA

Multi-factor authentication (MFA) requires you to register a device, which is used as an additional factor when you log in to Advanced Identity Cloud.

The following table summarizes different tasks related to devices used for MFA:

| Task                                                                                                                                                                                       | Resources                                                                                                                                              |
| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **Learn about authenticator apps**Download an authenticator app that supports push authentication notifications and one-time passwords, and register it in Advanced Identity Cloud.        | * [Authenticator apps](authenticator-app.html)                                                                                                         |
| **Recovering user accounts**Learn how to recover a user account when the user has lost their registered device, or when their device has become out of sync with Advanced Identity Cloud.  | - [Recover after replacing a lost device](authn-mfa-using-lost.html)

- [Recover after a device becomes out of sync](authn-mfa-using-out-of-sync.html) |
| **Reset registered devices**In some scenarios, for example, when users aren't able to access their recovery codes, you can reset their registered devices to allow them to register again. | * [Reset registered devices using REST](authn-mfa-reset-devices.html)                                                                                  |
| **List registered devices**Learn how to list devices registered to a user.                                                                                                                 | - [List registered devices over REST](authn-mfa-list-devices.html)                                                                                     |
| **Rename registered devices**Learn how to rename devices registered to a user.                                                                                                             | * [Rename registered devices over REST](rename-mfa-devices.html)                                                                                       |

|   |                                                                                                                                                                                                                                                                                                                                                           |
| - | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | MFA details are stored in the following profile attributes:- OATH: `oathDeviceProfiles`

- Push: `pushDeviceProfiles`

- WebAuthn: `webauthnDeviceProfiles`

- Bound: `boundDevices`You can access these attributes in scripts in the same way you access other [profile attributes](../am-scripting/scripting-api-node.html#scripting-api-node-id-repo). |