A CIBA authenticator is responsible for authenticating users through an out-of-band method.

You can use the PingFederate SDK to implement a custom solution. For more information, see the Javadoc for the OOBAuthPlugin interface, the SampleEmailAuthPlugin.java file for a sample implementation, and the SDK developer's guide for build and deployment information.


The Javadoc for PingFederate and the sample implementation are in the <pf_install>/pingfederate/sdk directory.

Once deployed, you can create one or more instance configurations of the authenticator.

  • Go to Authentication > OAuth > CIBA Authenticators and create or select the instance you want to manage.
  • To manage the CIBA authenticator, choose from the following options.
    Create New Instance Configure a new instance
    <Existing instance link> under Instance Name Modify an existing instance
    Check Usage Review the usage of an existing instance
    Delete or Undelete Remove an existing instance or cancel the removal