PingOne Platform APIs

Authentication flow states

Sign-on policy evaluation logic

For more information about sign-on policies, refer to Sign-on policies, Sign-on policy actions, and Application sign-on policy assignments in the PingOne Platform APIs.

Common authentication actions

The PingOne flow API supports single-factor and multi-factor actions to complete an authentication workflow. For a single-factor login flow, there are four branches that allow the user to submit a username and password (or create a new account). PingOne also supports an identity first discovery action that identifies the user and determines the user’s applicable identity provider and authentication methods. For a multi-factor authentication action, there are two branches in which either a one-time password (OTP) or a push confirmation is used as the second factor in the authentication workflow.

PingOne supports a progressive profiling action that prompts users to provide additional data at sign on. This action type does not authenticate users. It is used only to obtain additional profile data.

For more information about flow states and their associated sign-on actions, refer to Flows in Platform Auth APIs.