What authentication tree nodes are provided for device registration in PingAM?

ForgeRock AM’s device-registration flow employs the specific registration nodes that actually enroll authenticators: OATH Registration Node (OTP tokens), Push Registration Node (AM Push), and WebAuthn Registration Node (FIDO2). MFA Registration Options is a routing node only and does not perform registration, so the required set is D.

A – Lacks WebAuthn Registration; MFA Registration Options is not a registration node.

B – Replaces Push Registration with WebAuthn; still contains non-registration MFA Options node.

C – Contains MFA Options (not a registration node) and omits OATH Registration.

1. ForgeRock AM 7.3 Authentication Trees Nodes Reference, “OATH Registration Node”, “Push Registration Node”, “WebAuthn Registration Node”. (docs.am/7.3/trees-ref)

2. ForgeRock AM 7.3 Authentication Trees Guide, §2.3 “Registering Devices”.