Multi-factor authentication

PingOne Privilege integrates with PingID multi-factor authentication (MFA), so users can authenticate with the MFA method their organization already uses. This section explains how to challenge users with MFA at two points:

When users connect the PingOne Privilege app to the gateway in Endpoint Controller-based deployments.
When users run sudo commands on Unix/Linux servers with just-in-time (JIT) access.

The following topics explain how to require MFA:

Requiring PingID MFA for PingOne Privilege app connections: Challenge users with PingID MFA when they connect the PingOne Privilege app to the gateway.
Configuring step-up authentication for sudo commands: Require an MFA challenge when users run sudo commands on Unix/Linux servers with just-in-time (JIT) access.