1. The adapter makes a back-channel POST call to PingOne with the API key and target ID. API-based flows use the API key directly to authenticate the request. Widget-based flows include parameters to request an access token.
  2. For widget-based flows, the adapter renders the widget using the access token.
  3. DaVinci handles the flow in PingOne. After the flow completes, a JSON response is sent back to the adapter.

    If using the adapter's full-page redirect ability, the flow might look different depending on your configuration.

  4. PingFederate redirects the user to the web application with the user attributes from the response.