---
title: Register Thing node
description: Not supported in Advanced Identity Cloud
component: auth-node-ref
version: latest
page_id: auth-node-ref:self-managed:register-thing
canonical_url: https://docs.pingidentity.com/auth-node-ref/latest/self-managed/register-thing.html
keywords: ["Nodes &amp; Trees", "Journeys", "Authentication"]
page_aliases: ["self-managed/auth-node-register-thing.adoc"]
superseded_by: https://docs.pingidentity.com/auth-node-ref/latest/self-managed/register-thing.html
section_ids:
  availability: Availability
  dependencies: Dependencies
  outcomes: Outcomes
  configuration: Configuration
---

# Register Thing node

Not supported in Advanced Identity Cloud

This node registers a *thing*. A thing represents an IoT device, service, or the [IoT Gateway](https://backstage.forgerock.com/docs/iot/7.4/evaluation-guide/about-iot.html#about-fr-things).

## Availability

| Product                               | Available? |
| ------------------------------------- | ---------- |
| PingOne Advanced Identity Cloud       | No         |
| PingAM (self-managed)                 | Yes        |
| Ping Identity Platform (self-managed) | Yes        |

## Dependencies

Before you configure this node, you must configure the [IoT service](https://docs.pingidentity.com/pingam/8.1/setup/services-configuration.html#global-iot) for the realm.

|   |                                                                                                                                                   |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | Support for this node is provided by the [IoT SDK](https://backstage.forgerock.com/docs/iot/7.4/evaluation-guide/about-iot.html#about-fr-things). |

The node collects a JWT from the request and validates the JWT according to the configured [JWT registration method](#jwt-registration-method).

If the JWT is valid, the node uses the claims in the JWT to create an identity for the thing and register (or rotate) a confirmation key for it. Then, evaluation continues through the `Success` outcome.

If the node cannot validate the JWT, evaluation continues through the `Failure` outcome.

For an example on how to use this node, refer to [Authenticate Thing node](authenticate-thing.html).

## Outcomes

* `Success`

* `Failure`

## Configuration

| Property                    | Usage                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| --------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| []()JWT Registration Method | Choose the method to validate the JWT:- Proof of Possession & Certificate

  Register using a Proof of Possession JWT that includes an X.509 certificate for providing trust. A challenge nonce is presented in the callback and must be included in the signed JWT.

- Proof of Possession & Software Statement

  Register using a Proof of Possession JWT and a Software Statement for providing trust. A challenge nonce is presented in the callback and must be included in the signed Proof of Possession JWT. The claims in the Software Statement take precedence over the claims in the Proof of Possession JWT.

- Proof of Possession

  Register using a Proof of Possession JWT without using a trusted third party. A challenge nonce is presented in the callback and must be included in the signed JWT.

- Software Statement

  Register using a Software Statement, without doing proof of possession. If you select this registration method, the resultant session token will not include a proof of possession restriction.Default: Proof of Possession & Certificate |
| Verify Certificate Subject  | If the configured JWT registration method is `Proof of Possession & Certificate`, this option verifies that the subject provided in the JWT is the same as the X.509 certificate subject CN or UID.Default: Enabled                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| Create Identity             | Whether AM creates an ID for the thing if one doesn't exist.Default: Disabled                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
| Rotate Confirmation Key     | Whether multiple confirmation keys can be registered for a thing. Disable this setting to allow only one key per thing.Default: Disabled                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| Default Attribute Values    | The default values for the thing's attributes, where KEY is the name of the attribute in the data store, and VALUE is the default value of the attribute.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| Claim to Attribute Mapping  | If Create Identity is enabled, this property lets you map verified claims in the JWT to attributes in the thing identity. KEY is the claim name and VALUE is the name of the attribute in the data store.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| Overwrite Attributes        | Whether the node overwrites the value for an existing profile attribute when a claim with a different value is provided in the JWT.Default: Disabled                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
