PingID Authentication for YubiKey

PingID enables you to use your YubiKey hardware token to access your account with the added security of multifactor authentication.

Before you can start using your YubiKey to authenticate, you'll need to pair it with your account. Pairing creates a trust between the YubiKey and your account, so you can use the YubiKey to authenticate during the login process.

Note: PingID supports YubiKey models which support Yubico OTP authentication. See https:// www.yubico.com/products/yubikey-hardware/compare-yubikeys/ for a list compatible YubiKey models.

Set up your YubiKey

1. Log in to your Ping ID account.
2. Click your account name in the upper right hand corner and select Devices, then click the + Add button.
3. If prompted, authenticate your login using your PingID app.
4. In the Add a New Device pop up, select YubiKey.

4. Insert the YubiKey into your computer USB port, make sure the YubiKey pop up window is the active window on your machine, and then tap the YubiKey.

A one-time passcode (OTP) is automatically generated and inserted into the YubiKey Setup window and Verify is selected automatically. You'll see a green checkmark indicating the pairing request is successfully, and you are automatically signed into your account or app.

5. Next time you want to log in to your account or application, you're be prompted to enter a YubiKey OTP. Press your YubiKey button to generate the OTP and click Sign On to authenticate and sign on.

Authenticate using a YubiKey

In a browser, log in to your account and then use your YubiKey hardware token to authenticate.

Note: You must pair your YubiKey with your account to enable authentication.

1. Log in to your account, or access an application that requires authentication. You'll see the YubiKey Authentication screen, prompting you to enter a YubiKey passcode.
2. Insert the YubiKey into your computer USB port, and then press the YubiKey button. A one-time passcode (OTP) is automatically generated and inserted into the YubiKey Authentication window.
3. Make sure the YubiKey Authentication window is selected as the active screen before you press the YubiKey button.
4. Click Sign On.
5. You'll see the green checkmark indicating authentication is successful and your access is approved.

Unpair your YubiKey

If you no longer want to use your YubiKey to authenticate using PingID, you'll need to unpair it. Follow the instructions below to unpair your device from your account portal.

Note: If you do not have access to manage your devices from the My Devices page, you'll need to contact your helpdesk to ask your administrator to help you to unpair the device.

1. Log in to your Ping ID account.
   • The My Devices page opens, showing the devices you currently have paired with your account. The primary device is shown in green.
2. Select your YubiKey. You may be asked to authenticate using your primary (default) device.
3. Click the menu icon to expand the entry of the device you want to remove, and then click the trash can. You'll be prompted to confirm your request.
4. Click Remove to confirm.

If you only have one device or authentication method paired with your account, next time you log on you will be prompted to register a device in order to access your account.

PingID Support and Help

If you need additional assistance installing or setting up PingID or if you have set up PingID in the past and are now having issues with the app or have lost/changed your device, please feel free to stop by one of our service centers (Norman | Oklahoma City | Tulsa) or contact us via phone.