You can bypass the need for a user to authenticate using their secondary authentication method.
Bypassing a user's service can be necessary, for example, if a user of the PingID service doesn't have access to the mobile device that is paired with PingID. Generally, you will bypass a user's secondary authentication for a selected duration. At the end of a limited duration, secondary authentication for the user resumes automatically.
Global Administrators can set the bypass for an unlimited duration if you want to bypass the user's service permanently. All other administrators are limited to a maximum bypass period of 3 days.
In the PingOne
The Users by Service page lists all of your users for all services.
Below the search bar, click the service you're interested
The list is filtered to display only the selected service users.
- For a selected user, click the Expand icon to expand the user information for the service.
edit icon, then
click the Bypass toggle.
You are prompted to select the duration for bypassing the specific service from a list.
Select the duration to bypass the service.
If you're a Global Administrator, you can select Unlimited Time to bypass the service indefinitely. All other administrators are restricted to a maximum period of 3 days.
Click the Bypass toggle again to enable your bypass
When the selected length of time has passed, authentication automatically resumes for the user.
If you select Unlimited Time, the user is never authenticated using this authentication provider.
The bypass is implemented and effective immediately.