---
title: Patch Object node
description: The Patch Object node updates the attributes of an existing managed identity object.
component: auth-node-ref
version: latest
page_id: auth-node-ref::patch-object
canonical_url: https://docs.pingidentity.com/auth-node-ref/latest/patch-object.html
keywords: ["Nodes & Trees", "Journeys", "Authentication", "User Profiles"]
page_aliases: ["auth-node-patch-object.adoc"]
superseded_by: https://docs.pingidentity.com/auth-node-ref/latest/patch-object.html
section_ids:
  example: Example
  availability: Availability
  inputs: Inputs
  dependencies: Dependencies
  configuration: Configuration
  outputs: Outputs
  outcomes: Outcomes
  errors: Errors
---

# Patch Object node

The Patch Object node updates the attributes of an existing managed identity object.

## Example

This journey uses the Patch Object node to update a user's password:

![Updating a password](_images/update-password-journey.png)

The user has already authenticated before beginning this journey:

* The [Get Session Data node](get-session-data.html) stores the `userName` from the session.

* The [Attribute Present Decision node](attribute-present-decision.html) checks whether the user object has a password attribute.

* If so, the first [Page node](page.html) with the [Platform Password node](platform-password.html) prompts the user for the current password.

* Otherwise, the [Email Suspend node](email-suspend.html) sends an email to the user and suspends the flow until the user follows the link in the message.

* The [Data Store Decision node](data-store-decision.html) confirms the username-password credentials.

* The second [Page node](page.html) with the [Platform Password node](platform-password.html) prompts the user for the new password.

* The Patch Object node updates the user object with the new password.

## Availability

| Product                               | Available? |
| ------------------------------------- | ---------- |
| PingOne Advanced Identity Cloud       | Yes        |
| PingAM (self-managed)                 | Yes 1      |
| Ping Identity Platform (self-managed) | Yes        |

1 This functionality requires that you configure AM as part of a [Ping Identity Platform deployment](https://docs.pingidentity.com/platform/8.1/sample-setup/).

## Inputs

This node reads the Identity Attribute and the managed object fields to patch from the shared node state. If it can't read the Identity Attribute, it reads the `userName` from the shared node state.

## Dependencies

This node depends on the underlying identity service (PingIDM) to find and patch the managed object.

## Configuration

| Property           | Usage                                                                                                                                                                                                                                                                                                                                                                                            |
| ------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Patch as Object    | If enabled, update the object as its subject—​for example, update a managed user object as the user; otherwise, update the object as the client application.Enable this property to patch fields of the current, authenticated user's account the client application can't update.Default: false                                                                                                 |
| Ignored Fields     | Omit the specified shared state fields from the patch.If no fields are specified, the node attempts to update all the shared state fields as part of the patch.Default: none                                                                                                                                                                                                                     |
| Identity Resource  | The type of managed identity resource object this node patches.This must match the identity resource type for the current flow.

To check for the available managed identity resource types, go to the IDM admin UI, and open the Manage drop-down list in the upper right corner of the screen.

Identity managed object types are preceded by the icon.Default: `managed/user` |
| Identity Attribute | The attribute used to identify the managed object in the underlying identity service (PingIDM).Default: `userName`                                                                                                                                                                                                                                                                               |

## Outputs

This node doesn't change the shared state.

## Outcomes

* `Patched`

  The node updated the managed object.

* `Failed`

  Any other case.

## Errors

This node logs the following warning messages when an update fails:

* `Failed to create object`

* `Failed to patch object`

Review the logs for additional messages describing the problem.