Using Token2 programmable hardware tokens with Ping Identity IAM
Ping Identity’s Identity and Access Management (IAM) platform can be protected with various authentication methods, including applications like Google Authenticator. Our programmable tokens can be used as a drop-in replacement for such applications, so it is quite easy to use Token2 programmable tokens to secure your Ping IAM accounts. The guide below will show you the steps for enabling MFA using our programmable tokens.
Requirements
A Ping Identity account with MFA feature enabled (we will use the Admin account of a trial subscription for this guide, but the procedure is similar for regular accounts as well)
Any of the Token2 TOTP programmable tokens (we discovered that Ping MFA allows a time drift of 300 seconds, so there should not be a requirement for the time sync methods, different from other systems, like Duo)
An app for provisioning the programmable tokens (NFC burner or USB Config tool, depending on the model). The list of compatible apps is available here.
Step 1. Enable an MFA method
Log in to your Ping IAM account and on the right top corner, click on the username and choose 'My MFA Methods' from the menu.
On the next page, click on 'Add method' and select 'Authenticator App'.
This will show a QR code that you will scan using one of the provisioning tool in the next step.
Launch the NFC burner app on your Android device and hit the "QR" button
Point the camera to the QR code shown on the account page. Upon a successful QR scan, the camera window should disappear
Turn on the token and touch it with your phone (make sure it is overlapped by the NFC antenna) and click "Connect" on the app
Upon successful connection, click the "Burn seed" button. If NFC link is established and the code is correctly scanned, you should see a status window showing "Burning..." and eventually (in a second or two), "burn seed successful.." message in the log window
Follow the steps below to perform setting the seed for your token using Windows App.
1. Launch the exe file, then select the NFC device from the drop-down list and click on "Connect". You should see a message box notifying about a successful operation.
2. Enter the seed generated (in base32 format) :
3. Place the token onto the NFC module and wait for its serial number to appear.
4. Click on "Burn seed" button. A log entry with the serial number and "Successful operation" text will be logged in the log window.
Launch the NFC burner app on your iPhone device and hit the "scan QR" button
Point the camera to the QR code shown on the account page. Upon a successful QR scan, the camera window should disappear and the seed field will be populated with the hex value of the seed
Touch the Burn button, then turn on the token and touch the top of your iPhone with the token
Check the results of the process in the Results log field
Please note that the procedures above are shown only as examples and are valid to single profile TOTP tokens only. The procedure for multi-profile and USB-programmable devices are similar but slightly different
Step 3. Verify the OTP
After the token provisioning is done, turn the token off and back on. Enter the OTP generated by the hardware token to the field below the QR code as shown below:
For large orders, Token2 offers volume discounts.If you are interested in larger volume orders, please contact us and we will get back with a quote immediately
We detected that you are visiting this website from an EU country. We recommend to continue with our EU website.
Choose the location
We detected that you are visiting this website from United Kingdom. We recommend to continue with our GBP website. Please note that only pricing is changing, shipping is still from Switzerland
COVID19 Situation in Switzerland and France
Due to current preventive measures being taken against the COVID19 outbreak in Switzerland and France (such as border closures and potential lockdown of Geneva airport) we are expecting delays in shipping and delivery with both express delivery (Fedex/UPS) as well as the regular post In particular, as the office in France is currently not functioning, all orders placed on the EU website will be shipped from Switzerland instead.
Apologies for the inconvinience!
Shipping from Switzerland
Please note that between 13-Aug-2021 and 26-Aug-2021 our warehouse in France is under maintenance, therefore all orders will be shipped from Switzerland.
This may incur additional fees such as import duties and customs clearance fees when shipping to the EU countries.
Buy options
Please
go to the product page (click on product title or Details link) and then click on the Buy options tab to change the quantity and product options or view available stock quantity.
Ping Identity’s Identity and Access Management (IAM) platform can be protected with various authentication methods, including applications like Google Authenticator. Our programmable tokens can be used as a drop-in replacement for such applications, so it is quite easy to use Token2 programmable tokens to secure your Ping IAM accounts. The guide below will show you the steps for enabling MFA using our programmable tokens.
