Multi-factor authentication

PingOne Privilege integrates with PingID Workforce Authentication, so users can authenticate with the multi-factor authentication (MFA) method their organization already uses. This section explains how to challenge users with MFA at two points:

When users connect the PingOne Privilege app to the gateway in Endpoint Controller-based deployments.
When users run sudo commands on Unix/Linux servers with just-in-time (JIT) access.

The following topics explain how to require MFA:

Requiring PingID Workforce Authentication for PingOne Privilege app connections: Challenge users with PingID Workforce Authentication when they connect the PingOne Privilege app to the gateway.
Configuring step-up authentication for sudo commands: Require an MFA challenge when users run sudo commands on Unix/Linux servers with just-in-time (JIT) access.