The following section provides additional information about PingOne platform authorization and authentication workflows. It also includes detailed information about access tokens and ID tokens and how user scopes and platform roles enable access to PingOne resources. Topics include:

• Access tokens and ID tokens

• Authorization and authentication by application type

• Authorization flow by grant type

• Access services through scopes and roles

• Control access to applications through roles and groups

• PingOne basic login authentication flow

• Login and MFA authentication workflow walkthrough

• PingOne authentication flow states