If a user unpairs a device while offline, they can only unpair a device locally, and the PingID service remains paired, blocking the user from pairing that device again until the device is unpaired from the PingID service.

Note:

When the user next attempts to single sign on (SSO) to PingOne, they'll be prompted to pair a new device to complete the SSO process. If the new device isn't yet available to the user, you can set the PingID service to bypass PingID authentication for the user for a selected duration. For more information, see Bypassing a user's service.

  1. In the PingOne admin portal, go to Users > Users by Service.
  2. From the services list, click PingID.
  3. Click the Expand icon to expand the user activity panel for the relevant user.
    Screen capture showing the expanded user activity panel for a user in PingOne. The screen capture shows three expandable sections: Single Sign-On, Provisioning, and PingID.
  4. Click PingID to expand the entry.
  5. Click the Pencil icon next to the relevant desktop app entry, and then click Unpair.
  6. When prompted, verify that you want to unpair the device.
    Screen capture of the PingOne admin portal, PingID Devices section, showing the Pencil icon for a Desktop Mac device and the popup menu for the Make Primary, Unpair and Multi-select options when editing a user,
    The device is unpaired from the PingID service. The user will be prompted to pair a new device the next time they SSO to PingOne, unless you've set the PingID service bypass option.
    Note:

    It might be necessary for the user to unpair the device locally in order to be able to pair the device again.