A CIBA authenticator is responsible for authenticating users through an out-of-band method.

You can use the PingFederate SDK to implement a custom solution. For more information, see the Javadoc for the OOBAuthPlugin interface, the SampleEmailAuthPlugin.java file for a sample implementation, and the SDK developer's guide for build and deployment information.


The Javadoc for PingFederate and the sample implementation are in the <pf_install>/pingfederate/sdk directory.

Once deployed, you can create one or more instance configurations of the authenticator.

  • Go to Authentication > OAuth > CIBA Authenticators and create or select the instance you want to manage.
  • To manage the CIBA authenticator, choose from the following options.
    Configure a new instance Click Create New Instance
    Modify an existing instance Click the name of instance in the Instance Name column
    View the usage of an existing instance Click Check Usage in the Action column on the instance's row
    Remove an existing instance Click Delete in the Action column on the instance's row