8781  Reviews star_rate star_rate star_rate star_rate star_half
$3,375USD
Duration 3 days
Course Code P1DV-400
Available Formats Classroom, Virtual
Next Class: Oct 14, 2026

Upcoming Course Dates

Ask a Question Request Other Date Request On-site Course

Overview

Course Description

This course builds upon the Getting Started With PingOne DaVinci training to provide advanced techniques for designing, managing, and configuring production-ready identity orchestration solutions. Learners will master advanced Customer Identity and Access Management (CIAM) journeys, implementing registration, login, multi-factor authentication (MFA), and account recovery using PingOne platform services. The course covers advanced authentication patterns, including passwordless FIDO2 passkeys, social login, self-service profile and device management, and QR code-based sign-in scenarios. Participants will gain hands-on experience integrating PingOne Protect into DaVinci flows to define risk policies, configure predictors, and implement frictionless, conditional authentication based on detected threat levels. Through practical exercises, you will connect these orchestrated flows to a production-ready web application, using PingOne as the authorization server to implement secure OAuth 2.0(OAuth2) and OpenID Connect (OIDC) redirect-based authentication with comprehensive session management.

Skills Gained

Upon completion of this course, you should be able to:

  • Design and implement production-ready CIAM registration, login, MFA, and account recovery journeys using DaVinci and PingOne platform services
  • Design and implement advanced CIAM journeys using DaVinci, including passwordless authentication with FIDO2 passkeys, social login with external identity providers, self-service profile and device management, and QR code–based sign-in for physical store scenarios
  • Use PingOne Protect for threat protection and risk-based authentication by configuring risk predictors, defining risk policies, and integrating risk evaluation into DaVinci flows
  • Connect the DaVinci flows built in previous chapters to a production-ready web application using PingOne as the authorization server, implementing OAuth2/OIDC redirect-based authentication with session management

Who Can Benefit

The target audiences for this course include:

  • DaVinci Solution Engineers
  • Technical users advancing from basic to admin level

Prerequisites

The following are the prerequisites for successfully completing this course:

  • Completion of the Getting Started With PingOne DaVinci course
  • Basic understanding of JavaScript, HTML, CSS, and the PingOne Platform

Badge Description

Earners of the PingOne DaVinci Practitioner badge have demonstrated skills in designing and managing production-ready identity orchestration solutions. They can build advanced CIAM journeys for registration, login, MFA, and recovery; implement passwordless, social, profile, device, and QR sign-in experiences; integrate PingOne Protect for risk-based authentication; and connect DaVinci flows to web apps using OAuth 2.0 and OIDC.

Badge Tags

PingOne DaVinci, identity orchestration, CIAM, MFA, account recovery, passwordless, FIDO2 passkeys, social login, PingOne Protect, risk-based authentication, OAuth 2.0, OIDC, session management.

Read Less
|
View Full Schedule

Course Details

Course Details

Chapter 1: Building CIAM Registration and Login Journeys

Design and implement production-ready CIAM registration, login, MFA, and account recovery journeys using DaVinci and PingOne platform services.

Lesson 1: Building a Registration Flow

Create a complete user registration journey that captures credentials, verifies email addresses through one-time password (OTP), establishes secure sessions, and tracks user behavior including flow completions and abandonments:

  • Review PingOne and DaVinci orchestration
  • Review registration patterns
  • Capture username and password
  • Verify email and create user in PingOne
  • Analyze registration analytics
  • Track flow completions and abandonments

Lesson 2: Building a Login Flow

Design comprehensive login journeys supporting password-based authentication, single sign-on (SSO) via DaVinci flows, and proper handling of abandonment scenarios:

  • Review login patterns
  • Log in with Password Journey
  • Handle account status in login flows
  • Design login unhappy paths

Lesson 3: Implementing Password Reset and MFA

Strengthen authentication journeys by implementing MFA and secure account recovery mechanisms:

  • Review MFA in login and recovery journeys
  • Add a TOTP device as MFA during registration
  • Set up MFA for login
  • Handle MFA failures and lockout policies
  • Track incorrect MFA attempts
  • Review password reset and account recovery patterns
  • Configure Forgot Password and Account Recovery
  • Add Forgot Password flow to the Login flow

Chapter 2: Building Advanced DaVinci Journeys

Design and implement advanced CIAM journeys using DaVinci, including passwordless authentication with FIDO2 passkeys, social login with external identity providers, self-service profile and device management, and QR code–based sign-in for physical store scenarios.

Lesson 1: Implementing Passwordless Authentication With Passkeys

Implement passwordless authentication with FIDO2 passkeys in registration and login journeys, including device nicknames and support for existing password-based flows:

  • Explain passwordless authentication and prepare PingOne for passkeys
  • Enable passkeys in the MFA policy
  • Add passkey registration to the user journey
  • Build a passkey registration journey
  • Improve passkey management and sign-in experience
  • Add device nicknames for passkey devices
  • Build a passkey authentication journey

Lesson 2: Integrating Social Login With External Providers

Integrate Google as an external identity provider (IdP) to support social registration and social login, allowing users to authenticate with an existing Google account:

  • Explain social login and prepare the external provider
  • Create a Google Developer account
  • Add an external IdP
  • Add social registration to the user journey
  • Configure social registration
  • Add social login to the user journey
  • Configure social login

Lesson 3: Managing Customer Profiles and Devices

Build a self-service profile experience that protects access to profile tasks, manages registered authentication devices, and supports secure password changes:

  • Secure profile access and profile navigation
  • Configure device limits
  • Add authentication to the profile flow
  • Create a profile landing page
  • Manage registered authentication devices
  • Display registered devices
  • Add a TOTP device branch
  • Add passkey device branch
  • Remove TOTP devices
  • Remove passkey devices
  • Support self-service password changes
  • Change the password branch

Lesson 4: Enabling Physical Store Sign-In With QR Codes

Implement QR code sign-in for physical store scenarios so customers can authenticate on a trusted mobile device while an agent-assisted session remains active on another device. This approach replaces knowledge-based authentication (KBA) with a stronger cross-device authentication pattern:

  • Explain QR code sign-in and challenge correlation
  • Build the in-band flow (agent’s computer)
  • Build the in-band and out-of-band authentication flows
  • Build the out-of-band flow (mobile authentication)
  • Validate the complete QR code journey
  • Test the complete QR code journey

Chapter 3: Enabling Risk-Based Authentication With PingOne Protect

Use PingOne Protect for threat protection and risk-based authentication by configuring risk predictors, defining risk policies, and integrating risk evaluation into DaVinci flows. Emphasize conditional authentication flows based on detected risk levels, requiring additional verification for suspicious login attempts while maintaining a frictionless experience for trusted users.

Lesson 1: Configuring PingOne Protect Predictors

Configure PingOne Protect risk predictors and policy thresholds so authentication and registration flows can detect and respond to potential security threats based on evaluated risk levels:

  • Explain risk-based authentication and PingOne Protect
  • Analyze key risk predictors
  • Configure key risk predictors
  • Apply risk policy thresholds
  • Configure risk policy thresholds

Lesson 2: Implementing Risk-Based Authentication With DaVinci Flows

Integrate PingOne Protect risk evaluation into DaVinci registration and login flows by collecting device signals, invoking threat detection subflows, applying risk-based branching, updating risk evaluation results, and sending new-device notifications:

  • Explain threat detection and risk evaluation in DaVinci flows
  • Review the Threat Detection subflow
  • Add risk-based evaluation to registration and login flows
  • Add risk evaluation to the registration flow
  • Implement risk-based registration branching and update the risk evaluation result
  • Add risk evaluation to the login flow
  • Implement risk-based login branching and update the risk evaluation result
  • Extend risk-based responses with notifications
  • Configure the New Device email notification

Chapter 4: Integrating DaVinci Flows With a Web Application

Connect the DaVinci flows built in previous chapters to a production-ready web application using PingOne as the authorization server, implementing OAuth2/OIDC redirect-based authentication with session management.

Lesson 1: Converting Flows Into PingOne Flows and Setting Up Sessions

Convert DaVinci flows from standalone testing mode into production-ready PingOne flows, configure DaVinci applications and flow policies, and add session detection to prevent redundant reauthentication:

  • Explain integration methods and PingOne redirect flows
  • Convert flows into PingOne flows
  • Explain DaVinci applications and flow policies
  • Create flow policies
  • Establish session-based login
  • Set up session-based login

Lesson 2: Integrating a Web Application With DaVinci Flows

Configure a PingOne OIDC application, connect it to DaVinci flow policies, and integrate a web application with PingOne so redirect-based authentication and session-based login work end to end:

  • Explain OIDC application integration
  • Create an application in PingOne
  • Configure and validate web application integration
  • Set up the TelcoConnect application

Schedule

1 options available

FAQ

Does the course schedule include a Lunchbreak?

Classes typically include a 1-hour lunch break around midday. However, the exact break times and duration can vary depending on the specific class. Your instructor will provide detailed information at the start of the course.

What languages are used to deliver training?

Most courses are conducted in English, unless otherwise specified. Some courses will have the word "FRENCH" marked in red beside the scheduled date(s) indicating the language of instruction.

What does GTR stand for?

GTR stands for Guaranteed to Run; if you see a course with this status, it means this event is confirmed to run. View our GTR page to see our full list of Guaranteed to Run courses.

Does Ascendient Learning deliver group training?

Yes, we provide training for groups, individuals and private on sites. View our group training page for more information.

What does vendor-authorized training mean?

As a vendor-authorized training partner, we offer a curriculum that our partners have vetted. We use the same course materials and facilitate the same labs as our vendor-delivered training. These courses are considered the gold standard and, as such, are priced accordingly.

Is the training too basic, or will you go deep into technology?

It depends on your requirements, your role in your company, and your depth of knowledge. The good news about many of our learning paths, you can start from the fundamentals to highly specialized training.

How up-to-date are your courses and support materials?

We continuously work with our vendors to evaluate and refresh course material to reflect the latest training courses and best practices.

Are your instructors seasoned trainers who have deep knowledge of the training topic?

Ascendient Learning instructors have an average of 27 years of practical IT experience and have also served as consultants for an average of 15 years. To stay current, instructors spend at least 25 percent of their time learning new, emerging technologies and courses.

Do you provide hands-on training and exercises in an actual lab environment?

Lab access is dependent on the vendor and the type of training you sign up for. However, many of our top vendors will provide lab access to students to test and practice. The course description will specify lab access.

Will you customize the training for our company’s specific needs and goals?

We will work with you to identify training needs and areas of growth.  We offer a variety of training methods, such as private group training, on-site of your choice, and virtually. We provide courses and certifications that are aligned with your business goals.

How do I get started with certification?

Getting started on a certification pathway depends on your goals and the vendor you choose to get certified in. Many vendors offer entry-level IT certification to advanced IT certification that can boost your career. To get access to certification vouchers and discounts, please contact info@ascendientlearning.com.

Will I get access to content after I complete a course?

You will get access to the PDF of course books and guides, but access to the recording and slides will depend on the vendor and type of training you receive.

How do I request a W9 for Ascendient Learning?

View our filing status and how to request a W9.

Reviews

Good Course. We covered a lot of material in a short amount of time. This course had useful labs that built upon each other.

Great instructor, clear and concise course. Labs were easy to follow and worked perfectly.

this class was informative, made me think about certifying for the suse manager cert.

vary good online learning. instructor is vary good the way he explained every thing.

As long as you keep Holly as an instructor, I will always come back to learn.