The PingOne connector allows you to connect PingOne with One Identity Starling enabling you to take advantage of the features and products available with Starling Connect that complement and enhance the services provided by PingOne.

PingOne is a hybrid Identity-as-a-Service (IDaaS) based product that allows users to use single sign-on across different applications.

Supervisor configuration parameters

To configure the connector, following parameters are required:

• Connector name

• Client Id

• API Key

• Target URL (based on the region)

Supported objects and operations

Users

Table 285: Supported operations for Users

Operation	VERB
Create User	POST
Get User	GET
Get Users	GET
Update User	PUT
Delete User	DELETE

Groups

Table 286: Supported operations for Groups

Operation	VERB
Create Group	POST
Get Group	GET
Get Groups	GET
Update Group	PUT
Delete Group	DELETE

Mandatory fields

Users

• email[].value

• userName

Groups

displayName

User and Group mapping

The user and group mappings are listed in the tables below.

Table 287: User mapping

SCIM Parameter	PingOne Parameter
id	id
userName	userName
externalId	externalId
name.givenName	name.givenName
name.familyName	name.familyName
name.middleName	name.middleName
name.formatted	name.formatted
name.honorificPrefix	name.honorificPrefix
name.honorificSuffix	name.honorificSuffix
displayName	displayName
nickName	nickName
email.value	email.value
email.type	email.type
email.primary	email.primary
addresses.formatted	addresses.formatted
addresses.streetAddress	addresses.streetAddress
addresses.locality	addresses.locality
addresses.region	addresses.region
addresses.postalCode	addresses.postalCode
addresses.country	addresses.country
addresses.type	addresses.type
phoneNumbers.value	phoneNumbers.value
phoneNumbers.type	phoneNumbers.type
password	password
profileUrl	profileUrl
title	title
userType	userType
preferredLanguage	preferredLanguage
locale	locale
timeZone	timeZone
active	active
entitlements.value	entitlements.value
roles.value	roles.value
ims.value	ims.value
ims.type	ims.type
groups.value	groups.value
groups.display	groups.display
x509Certificates.value	x509Certificates.value
extension.accountId	extension.accountId
extension.directoryId	extension.directoryId
extension.state	extension.state
extension.passwordExpired	extension.passwordExpired
meta.created	meta.created
meta.lastModified	meta.lastModified

Groups

Table 288: Group mapping

SCIM parameter	PingOne parameter
id	id
displayName	displayName
members.value	members.value
members.display	members.display
members.type	members.type
extension.accountId	extension.accountId
extension.directoryId	extension.directoryId
meta.created	meta.created
meta.lastModified	meta.lastModified

Connector limitations

• PingOne supports addresses of type home, work, and other. Similarly, it supports phone numbers of types work, mobile, home, fax, pager, and other. However the connector supports only one type of address and phone number.
  The connector first looks for type work. If type work is not found, the connector looks for type home.
  Else, it looks for the address and phone number of any type. If type value is not present, then the connector assigns the value of work to type.