Multi-user with Ping Federate:
MagicEndpoint Demo

MagicEndpoint seamlessly integrates with Ping Identity
to enhance security and user experience by eliminating manual login steps.

Transcript

The first user logs into Windows using the phone to authenticate. When there are multiple phones and users registered on the same device, the phone near the laptop that has the app running will get the pop-up requesting login approval. Here the user opens the OpenVPN application and clicks on “Log In With Single Sign-On.” Which, in our example, uses Ping Identity. It gets redirected to the Ping Identity portal and there he or she clicks on the MagicEndpoint IdP to do the authentication for Ping Identity as the delegated IdP.

MagicEndpoint finds the right TPM key for this user and uses it to authenticate the user into the application via public key cryptography and no action required by the user at all. The user is logged in and we can see the OpenVPN ID of this user at the top right corner. The log will show our IdP has identified the right user, “ad1,” with the corresponding TPM key. Now, user ad1 logs out and closes the WinMagic authenticator app on the phone and will perform the same steps for user “ad2.” Again, this user opens the OpenVPN application and clicks on “Login With Single Sing-On.” The request gets redirected to the Ping Identity portal and again the user clicks on MagicEndpoint IdP to do the authentication for Ping Identity as the delegated IdP. MagicEndpoint again finds the right TPM key for this user and uses it to authenticate the user into the application. User ad2 is logged in and we can see the OpenVPN ID of this user at the top right corner. The log will show our IdP has identified the right user ad2 with the corresponding TPM key.

Suggested Videos

MagicEndpoint Passwordless Authentication

MagicEndpoint Demo: Pre-boot authentication, Windows 365 and device trust signals

SANS Zero Trust Solutions Forum 2023 Presentation

keyboard_arrow_up