Feature/mfa integration

Package.swift

@@ -48,6 +48,7 @@ let package = Package(
         .library(name: "PingOath", targets: ["PingOath"]),
         .library(name: "PingPush", targets: ["PingPush"]),
         .library(name: "PingAuthMigration", targets: ["PingAuthMigration"]),
+        .library(name: "PingOneMFA", targets: ["PingOneMFA"]),
 
         // MARK: - Utilities
         .library(name: "PingBinding", targets: ["PingBinding"])
@@ -57,7 +58,8 @@ let package = Package(
         .package(url: "https://github.com/pingidentity/pingone-signals-sdk-ios.git", "5.4.0"..<"5.5.0"),
         .package(url: "https://github.com/facebook/facebook-ios-sdk.git", "16.3.1"..<"16.4.0"),
         .package(url: "https://github.com/google/GoogleSignIn-iOS.git", exact: "9.0.0"),
-        .package(url: "https://github.com/GoogleCloudPlatform/recaptcha-enterprise-mobile-sdk.git", "18.8.1"..<"18.9.0")
+        .package(url: "https://github.com/GoogleCloudPlatform/recaptcha-enterprise-mobile-sdk.git", "18.8.1"..<"18.9.0"),
+        .package(url: "https://github.com/pingidentity/pingone-mobile-sdk-ios.git", exact: "2.3.1")
     ],
     targets: [
         // MARK: - Foundation Targets (No dependencies)
@@ -303,7 +305,16 @@ let package = Package(
             exclude: ["AuthMigration.h"],
             resources: [.copy("PrivacyInfo.xcprivacy")]
         ),
-
+        .target(
+            name: "PingOneMFA",
+            dependencies: [
+                .product(name: "PingOneSDK", package: "pingone-mobile-sdk-ios")
+            ],
+            path: "PingOneMFA/PingOneMFA",
+            exclude: ["PingOneMFA.h"],
+            resources: [.copy("PrivacyInfo.xcprivacy")]
+        ),
+
         // MARK: - Utility Targets
         .target(
             name: "PingBinding",

PingOneMFA/PingOneMFA.xcodeproj/xcshareddata/IDETemplateMacros.plist

@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>FILEHEADER</key>
+	<string>
+//  ___FILENAME___
+//  ___PACKAGENAME___
+//
+//  Copyright (c) ___YEAR___ Ping Identity Corporation. All rights reserved.
+//
+//  This software may be modified and distributed under the terms
+//  of the MIT license. See the LICENSE file for details.
+//
+</string>
+</dict>
+</plist>

PingOneMFA/PingOneMFA.xcodeproj/xcshareddata/xcschemes/PingOneMFATests.xcscheme

@@ -0,0 +1,71 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Scheme
+   LastUpgradeVersion = "1610"
+   version = "1.7">
+   <BuildAction
+      parallelizeBuildables = "YES"
+      buildImplicitDependencies = "YES"
+      buildArchitectures = "Automatic">
+      <BuildActionEntries>
+         <BuildActionEntry
+            buildForTesting = "YES"
+            buildForRunning = "NO"
+            buildForProfiling = "NO"
+            buildForArchiving = "NO"
+            buildForAnalyzing = "YES">
+            <BuildableReference
+               BuildableIdentifier = "primary"
+               BlueprintIdentifier = "14C0CBAE9D4D412388F63F45"
+               BuildableName = "PingOneMFATests.xctest"
+               BlueprintName = "PingOneMFATests"
+               ReferencedContainer = "container:PingOneMFA.xcodeproj">
+            </BuildableReference>
+         </BuildActionEntry>
+      </BuildActionEntries>
+   </BuildAction>
+   <TestAction
+      buildConfiguration = "Debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      shouldUseLaunchSchemeArgsEnv = "YES"
+      shouldAutocreateTestPlan = "YES">
+      <Testables>
+         <TestableReference
+            skipped = "NO"
+            parallelizable = "NO">
+            <BuildableReference
+               BuildableIdentifier = "primary"
+               BlueprintIdentifier = "14C0CBAE9D4D412388F63F45"
+               BuildableName = "PingOneMFATests.xctest"
+               BlueprintName = "PingOneMFATests"
+               ReferencedContainer = "container:PingOneMFA.xcodeproj">
+            </BuildableReference>
+         </TestableReference>
+      </Testables>
+   </TestAction>
+   <LaunchAction
+      buildConfiguration = "Debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      launchStyle = "0"
+      useCustomWorkingDirectory = "NO"
+      ignoresPersistentStateOnLaunch = "NO"
+      debugDocumentVersioning = "YES"
+      debugServiceExtension = "internal"
+      allowLocationSimulation = "YES">
+   </LaunchAction>
+   <ProfileAction
+      buildConfiguration = "Release"
+      shouldUseLaunchSchemeArgsEnv = "YES"
+      savedToolIdentifier = ""
+      useCustomWorkingDirectory = "NO"
+      debugDocumentVersioning = "YES">
+   </ProfileAction>
+   <AnalyzeAction
+      buildConfiguration = "Debug">
+   </AnalyzeAction>
+   <ArchiveAction
+      buildConfiguration = "Release"
+      revealArchiveInOrganizer = "YES">
+   </ArchiveAction>
+</Scheme>

PingOneMFA/PingOneMFA/AccountParser.swift

@@ -0,0 +1,54 @@
+//
+//  AccountParser.swift
+//  PingOneMFA
+//
+//  Copyright (c) 2025 - 2026 Ping Identity Corporation. All rights reserved.
+//
+//  This software may be modified and distributed under the terms
+//  of the MIT license. See the LICENSE file for details.
+//
+
+import Foundation
+
+internal struct AccountParser {
+
+    internal static func parse(_ deviceInfo: [String: Any]?) -> [PingOneMfaAccount] {
+        guard let deviceInfo,
+              let data = try? JSONSerialization.data(withJSONObject: deviceInfo),
+              let decoded = try? JSONDecoder().decode([String: RegionDto].self, from: data)
+        else { return [] }
+
+        return decoded.flatMap { region, regionDto in
+            regionDto.users.map { user in
+                PingOneMfaAccount(
+                    region: region,
+                    id: user.id ?? "",
+                    deviceId: user.device?.id ?? "",
+                    environmentId: user.environment?.id ?? "",
+                    name: user.name?.given ?? "",
+                    family: user.name?.family ?? ""
+                )
+            }
+        }
+    }
+}
+
+private struct RegionDto: Decodable {
+    var users: [UserDto] = []
+}
+
+private struct UserDto: Decodable {
+    var id: String?
+    var environment: IdContainer?
+    var device: IdContainer?
+    var name: NameDto?
+}
+
+private struct IdContainer: Decodable {
+    var id: String?
+}
+
+private struct NameDto: Decodable {
+    var given: String?
+    var family: String?
+}

PingOneMFA/PingOneMFA/Geo.swift

@@ -0,0 +1,29 @@
+//
+//  PingOneMFAConfig.swift
+//  PingOneMFA
+//
+//  Copyright (c) 2025 - 2026 Ping Identity Corporation. All rights reserved.
+//
+//  This software may be modified and distributed under the terms
+//  of the MIT license. See the LICENSE file for details.
+//
+
+import Foundation
+
+/// Geographic region selector for the PingOneMFA SDK.
+///
+/// Specifies the PingOne cloud region to connect to. Maps 1:1 to `PingOneSDK.PingOneGeo`
+/// without leaking the upstream module.
+public enum Geo: Sendable, Equatable {
+    /// The North America region.
+    case northAmerica
+    /// The Europe region.
+    case europe
+    /// The Australia region.
+    case australia
+    /// The Canada region.
+    case canada
+    /// The Singapore region.
+    case singapore
+}
+

PingOneMFA/PingOneMFA/OtpCodeInfo.swift

@@ -0,0 +1,29 @@
+//
+//  OtpCodeInfo.swift
+//  PingOneMFA
+//
+//  Copyright (c) 2025 - 2026 Ping Identity Corporation. All rights reserved.
+//
+//  This software may be modified and distributed under the terms
+//  of the MIT license. See the LICENSE file for details.
+//
+
+import Foundation
+
+/// A value type representing a one-time passcode with its validity window.
+public struct OtpCodeInfo: Sendable, Equatable {
+    /// The current OTP code string to display to the user.
+    public let code: String
+    /// The number of seconds remaining before this code expires.
+    public let secondsRemaining: Int
+
+    /// Creates an `OtpCodeInfo` with the given code and remaining validity.
+    ///
+    /// - Parameters:
+    ///   - code: The current OTP code string.
+    ///   - secondsRemaining: Seconds until the code expires.
+    public init(code: String, secondsRemaining: Int) {
+        self.code = code
+        self.secondsRemaining = secondsRemaining
+    }
+}

PingOneMFA/PingOneMFA/PingOneMFA.h

@@ -0,0 +1,21 @@
+//
+//  PingOneMFA.h
+//  PingOneMFA
+//
+//  Copyright (c) 2025 - 2026 Ping Identity Corporation. All rights reserved.
+//
+//  This software may be modified and distributed under the terms
+//  of the MIT license. See the LICENSE file for details.
+
+
+#import <Foundation/Foundation.h>
+
+//! Project version number for PingOneMFA.
+FOUNDATION_EXPORT double PingOneMFAVersionNumber;
+
+//! Project version string for PingOneMFA.
+FOUNDATION_EXPORT const unsigned char PingOneMFAVersionString[];
+
+// In this header, you should import all the public headers of your framework using statements like #import <PingOneMFA/PublicHeader.h>
+
+