The following URLs must be accessible for the admin console and end user dock.
| URL | Purpose |
|---|---|
|
The URL for admins to connect to the organization's PingOne and PingID accounts for administration and management purposes | |
|
Each organization has its unique user dock sign-on page URL, prefixed by https://desktop.pingone.com/ | |
|
https://www.pingidentity.com/en/resources/downloads/pingid.html |
The PingID clients download page, including the SSH, VPN, PingFederate SSO integration kits, desktop app, Windows login, Windows login passwordless, and Mac login integration clients |
The following two tables show the access level required for each integration or client app. Where the first table shows “Yes”, the appropriate domain is shown in the second table. In addition, port 443 must be open for the selected domains to enable HTTPS traffic.
| Integration/Client App | Server Level Access | Client/Browser Level Access | ||
|---|---|---|---|---|
| API | Authenticator | API | Authenticator | |
|
PingID Adapter |
Yes |
Yes |
No |
Yes |
|
RADIUS PCV |
Yes |
No |
No |
No |
|
SSH |
Yes |
No |
N/A |
N/A |
|
Win Login |
N/A |
N/A |
Yes |
Yes |
|
Mac Login |
N/A |
N/A |
Yes |
Yes |
|
ADFS |
Yes |
Yes |
No |
Yes |
|
Mobile Clients |
N/A |
N/A |
Yes |
No |
|
Desktop Apps Clients |
N/A |
N/A |
Yes |
No |
|
Custom API Apps & Integrations |
Yes |
No |
N/A |
N/A |
| PingID Cloud Service | Region | Domain |
|---|---|---|
|
API |
North America (NA) |
idpxnyl3m.pingidentity.com ohi-idpxnyl3m.pingidentity.com ore-idpxnyl3m.pingidentity.com |
|
Authenticator |
authenticator.pingone.com | |
|
API |
Europe (EU) |
idpxnyl3m.pingidentity.eu fra-idpxnyl3m.pingidentity.eu ire-idpxnyl3m.pingidentity.eu |
|
Authenticator |
authenticator.pingone.eu | |
|
API |
Australia (AU) |
idpxnyl3m.pingidentity.com.au |
|
Authenticator |
authenticator.pingone.com.au |
Organizations that permit the download and usage of the PingID desktop app or other PingID integrations should also permit access to the PingID products download page URL, also with port 443 open.
If you use email for PingID one-time passcodes (OTP), ensure that your email system allows delivery of OTP messages. For more information, see https://aws.amazon.com/blogs/messaging-and-targeting/amazon-ses-ip-addresses/.