PingOne Integration Guide

Integration with PingOne provides visibility about your PingOne users, groups, roles, and the applications they can access. After integration, Authomize provides visibility into PingOne and the applications  enabling improved identity security and automated access reviews.

Integration requires the following steps:

1. Set up a PingOne application.
2. Use the relevant OIDC application credentials to integrate with Authomize.

Set Up a PingOne Application

For more information, see https://docs.pingidentity.com/r/en-us/pingone/p1_add_app_worker

1. Log into PingIdentity as an admin.
2. Select an environment in which to create the application, for example, “Administrators.”
3. From the selected environment, select Applications, then click +.
4. In the Add Application dialog, enter these:
   • Application Name
   • Description (optional)
   • Icon (optional)
5. For Application Type, select Worker, then click Save.
   The new application is displayed.
6. Select the Roles tab then click Grant Roles.
   1. From the Available responsibilities list, select the Configuration Read Only role.
   2. Click the down-arrow and select the box
   3. Scroll to find the Identity Data Read Only role.
   4. Select all environments, minimally one.
      If you select only one, it’s best to select Administrators.
7. Click Save.
8. Select the toggle to enable the new environment:
   
9. Select the Configuration tab.
   From here, you will copy the information needed to enable the integration:
   

Integrate PingOne with Authomize

You will use the application's OIDC credentials to enable the integration in Authomize.

Prerequisites

• You can access Authomize as a system administrator.
• You have the PingOne Token endpoint, Client ID, and Client secret created in the previous procedure.

1. Log into Authomize.
   
2. From the main menu, choose Integrations.
3. Click Add New App and choose Ping Identity.
   The Integrate Ping Identity dialog is displayed:
   
   
4. In the Integrate Ping Identity dialog, follow these steps:
   
   1. Skip step 1.
   2. For step 2, copy data from the PingOne Configuration tab of the newly-created environment and paste it in the appropriate fields:
      1. Client ID (from Ping Identity A)
      2. Client Secret (from Ping Identity B)
      3. Ping Token Endpoint (from Ping Identity C)
         You may need to expand the URLs to reveal the endpoint URL.
   3. (Optional) You can enter a unique name for this integration.  By default, the integration will be named Ping Identity.
   4. (Optional) Select a current Authomize user as the app owner.
   5. Click Create.

The Ping Identity tile is displayed as a connected app. The synchronization process begins, and its status will be shown when it is completed.

Data

• Users
• Groups
• Roles
• Applications
• Environments
• Identity providers
• Activities - login

• PingOne_Integration_Guide-21.Dec.22.pdf700 KB