--- title: Managing app and group lists description: You can apply a policy to any of the applications and groups that appear in the relevant list. component: pingid page_id: pingid:pingid_service_management:pid_managing_app_group_lists canonical_url: http://docs.pingidentity.com/pingid/pingid_service_management/pid_managing_app_group_lists.html revdate: November 14, 2022 section_ids: adding-a-pingfederate-application: Adding a PingFederate application about-this-task: About this task steps: Steps result: Result: result-2: Result: result-3: Result: result-4: Result: defining-pingfederate-application-id-attributes: Defining PingFederate application ID attributes editing-the-applications-list: Editing the applications list about-this-task-2: About this task steps-2: Steps result-5: Result: result-6: Result: result-7: Result: updating-the-policy-groups-list: Updating the policy groups list before-you-begin: Before you begin about-this-task-3: About this task steps-3: Steps result-8: Result: --- # Managing app and group lists You can apply a policy to any of the applications and groups that appear in the relevant list. You can: * Manually add applications to the applications list. See [Adding a PingFederate application](pid_adding_pf_applicating.html). * Define a PingFederate application ID attribute. See [Defining PingFederate application ID attributes](pid_defining_pf_application_id_attributes.html). * Edit the applications list. See [Editing the applications list](pid_editing_the_applications_list.html). * Update the policy groups list. See [Updating the policy groups list](pid_updating_policy_groups_list.html). | | | | - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | - List display items are limited to 300 for **Applications** and **Groups**. Use the search box to search for a specific application or group. - The All **Applications**/**Groups** check box selects all existing items and automatically applies any additional items that are added to PingID in the future. | ## Adding a PingFederate application You can add PingFederate applications to the applications list while creating a new policy. ### About this task By default, the applications list includes the following applications: * **Device Management**: This application enables a user to manage their own devices, including adding, editing, or deleting multiple devices through the **Devices** page. * **Password Reset**: This application enables users to reset their own password. | | | | - | ---------------------------------------------------------- | | | App-specific policies require PingID Adapter 1.4 or later. | ### Steps 1. In the admin portal, go to **Setup → PingID → Policy**, and click the **Web** tab. #### Result: A list of all the existing policies displays. ![A screen capture of the Policy page displaying a lit of the existing policies.](_images/ttv1564020580517.png) 2. Click **[icon: plus, set=fa]Add Policy**. #### Result: The **New Policy** window displays with the **Applications** list. ![A screen capture of the Target section displaying the Applications and Groups sections and listing.](_images/btr1564020583331.png) 3. In the **PingFederate Applications** section, click **[icon: plus, set=fa]Add Application**. #### Result: The **PingFederate Application** window appears. ![A screen capture of the PingFederate Application window.](_images/bth1564020583950.png) 4. In the **PingFederate Application** window, enter the following information: * **Name**: Enter the name of the application (max. 20 characters). * **ID**: Enter the application ID for the application. See [unique application ID](pid_defining_pf_application_id_attributes.html). * **Add application to target**: Select this check box to add the application to the new policy that you just created. 5. Click **Save**. #### Result: The new application is saved and appears in the **Applications** list. ## Defining PingFederate application ID attributes Define an application policy by adding the **Name** and **ID** attributes. Each application that you define in the PingID **Policy** tab must include the following information: * **Name**: The name of the application as it appears in the PingID policy application list. This attribute does not have to match the application name defined in PingFederate. * **ID**: The unique ID for the relevant application in PingFederate. This attribute must match the relevant PingFederate Application ID attribute as defined in the following table. | | | | - | ------------------------------------------------------------------------------------------------------ | | | For more information, see the [PingFederate documentation](http://docs.pingidentity.com/pingfederate). | **PingFederate application ID attribute mapping** | Type of Target Application | Application Identifier | | --------------------------------------------------- | ------------------------------------------ | | SAML or WS-Federation (service provider connection) | Partner Entity or Realm ID (Connection ID) | | OAuth or OpenID Connect (OAuth Client) | OAuth Client ID | | Custom | SP Adapter ID | ## Editing the applications list Rename a PingFederate application, change the unique ID, or delete an application. ### About this task Edit an application from the **New Policy** window. ### Steps 1. In the admin portal, go to **Setup → PingID → Policy**, click the **Web** tab. ![A screen capture of the Policy page displaying the Web tab with a listing of all the existing policies.](_images/ttv1564020580517.png) 2. Click **[icon: plus, set=fa]Add Policy**. #### Result: The **New Policy** window displays with the **Applications** list. ![A screen capture of the Applications list and Groups list.](_images/btr1564020583331.png) 3. In the **Target** section, from the **Applications** list, select the check box of the applications that you want to edit. 4. In the **PingFederate Applications** section, click **Manage Applications**. #### Result: The **PingFederate Applications** window opens, enabling the editing of the applications you selected and their **Name** and **ID** fields. ![A screen capture of the PingFederate Applications editing window.](_images/puz1564020950832.png) 5. To edit the application **Name** or **ID**, click the relevant field and enter the new name or ID. 6. To delete an application, in the application listing, click the **Delete** icon (![tvz1564020603752](_images/tvz1564020603752.png)). 7. Click **Save**. #### Result: Your changes are saved. The **Applications** list is updated. ## Updating the policy groups list When a group is created in Active Directory, it does not automatically appear in the policy groups list. At least one user that is assigned to the group must successfully authenticate using PingID for the groups list to be updated. ### Before you begin To ensure Active Directory groups are populated in the policy groups list, configure your system so that all user groups that appear in your directory are included in a PingOne single sign-on (SSO) assertion or PingID authentication, such as using the PingID Adapter attribute mapping. For more details, see [Registering the PingID service](../pingid_integrations/registering_the_pid_service.html). ### About this task For an organizational user group to appear in the policy groups list, update the policy groups list. ### Steps 1. Create a new user group in your local Active Directory. 2. Assign users to the directory group. At least one user must be assigned to the group. 3. Ensure at least one of the users in the new group authenticates with PingID successfully or through SSO to PingOne. 4. In the PingOne admin portal, go to **Setup → PingID → Policy**. Refresh the **Policy** window. #### Result: The next time you create or edit a policy, the new group appears in the **Groups** list.