Some customers will want Ping ID's MFA to work when authenticating to Centrify. This article describes how to set this up.
Applies to: All version of Centrify DirectControl and DirectAudit
Question: How can we configure PingID's MFA to authenticate to Centrify?
Answer: 1) Follow the instructions for Ping’s PAM installation. Instructions can be found at the below URL, provided as a courtesy. https://documentation.pingidentity.com/pingid/pingidAdminGuide/index.shtml#pi_t_configure_PAM.html
2) Rename the original pam_centrifydc_cloud.so in the lib and lib64 directories and then create the symlinks to /lib64/security/pam_pingid.so.
3) Create and assign the Centrify role without MFA and the UNIX right with MFA.