PingOne

Overview

The PingOne integration connects one PingOne environment to Oneleet, syncing the environment’s users as user account assets and the environment itself as an asset. This lets Oneleet monitor who can sign in through PingOne and whether sign-in requires multi-factor authentication.

What does Oneleet monitor?

• PingOne users (user accounts), including their admin roles, whether they’re disabled, and whether MFA is enabled with an active MFA method
• Your PingOne environment, including whether administrators must use MFA and whether the default sign-on policy requires MFA

Setup

To set up the PingOne integration, navigate to Integrations > Add integration > PingOne.

Oneleet connects with a read-only PingOne Worker application in the environment you want to monitor.

1. In the PingOne admin console, select the environment and open Applications → Applications. Click +, enter a name, select Worker, and click Save.
2. On the application’s Roles tab, click Grant Roles and grant Configuration Read Only and Identity Data Read Only for the environment.
3. Turn on the toggle at the top of the application’s panel to enable it.
4. On the Configuration tab, copy the Client ID, Client Secret, and Environment ID.
5. Paste them into the form in Oneleet, select the Region matching your console domain (.com is NA, .eu is EU, .ca is CA, .asia is AP, .com.au is AU, .sg is SG), and click Connect.

To monitor several environments, connect each one separately.