---
title: Anonymous User Mapping node
description: Maps unauthenticated users to a named anonymous account in PingAM, enabling limited access without credentials.
component: auth-node-ref
version: 8
page_id: auth-node-ref::anonymous-user-mapping
canonical_url: https://docs.pingidentity.com/auth-node-ref/latest/anonymous-user-mapping.html
llms_txt: https://docs.pingidentity.com/auth-node-ref/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2026-09-01T13:00:59Z
keywords: ["Nodes & Trees", "Journeys", "Authentication", "Accounts"]
page_aliases: ["auth-node-anonymous-user-mapping.adoc"]
superseded_by: https://docs.pingidentity.com/auth-node-ref/latest/anonymous-user-mapping.html
section_ids:
  example: Example
  availability: Availability
  inputs: Inputs
  dependencies: Dependencies
  configuration: Configuration
  outputs: Outputs
  callbacks: Callbacks
  outcomes: Outcomes
  errors: Errors
---

# Anonymous User Mapping node

The Anonymous User Mapping node lets users log in to an application or website without providing credentials, by assuming the identity of a specified existing user account. The default user for this purpose is named `anonymous`.

Take care to limit access for such users. For example, grant anonymous users access to public downloads on your site.

## Example

The following example uses this node to grant users access as an anonymous user if they've completed social authentication but don't have an existing profile:

![Example journey using the Anonymous User Mapping node](_images/anonymous-user-mapping-journey.png)

* The [Page node](page.html) containing the [Platform Username node](platform-username.html), [Platform Password node](platform-password.html), and [Select Identity Provider node](select-identity-provider.html) prompts the user to authenticate with a username and password, or to select a social identity provider.

* If the user enters their username and password, the [Data Store Decision node](data-store-decision.html) validates the username-password credentials, and authentication succeeds if their credentials are valid.

* If the user selects social authentication, the [Social Provider Handler node](social-provider-handler.html) does the following:

  * If the user has an existing user account, authenticates that user.

  * If the user doesn't have a user account, the Anonymous User Mapping node provides limited access as an anonymous user.

  * If the user interrupts the social authentication, they are routed back to the Page node to try again.

## Availability

| Product                               | Available? |
| ------------------------------------- | ---------- |
| PingOne Advanced Identity Cloud       | Yes        |
| PingAM (self-managed)                 | Yes        |
| Ping Identity Platform (self-managed) | Yes        |

## Inputs

This node requires the `realm` property in the incoming node state, which AM sets by default.

## Dependencies

The configured anonymous user must already exist in the realm, and its user status must be `active`.

## Configuration

| Property            | Usage                                                                                                                                        |
| ------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- |
| Anonymous User Name | The username of an account that represents anonymous users. This user must already exist in the realm, and its user status must be `active`. |

## Outputs

The node sets the following values:

* `username`: The configured anonymous username.

* The universal ID of the configured user.

* An anonymous authentication marker used when upgrading the session.

## Callbacks

This node doesn't send any callbacks.

## Outcomes

Single outcome path.

## Errors

The node can log the following error:

* `Anonymous user name could not be found in the configuration`

  The Anonymous User Name property is empty. Enter the username of an existing active user account.