---
title: PingID Provisioner
description: The PingID Provisioner allows PingFederate to integrate with PingID for user provisioning.
component: pingid
page_id: pingid::pf_pid_connector
canonical_url: https://docs.pingidentity.com/integrations/pingid/pf_pid_connector.html
revdate: February 10, 2026
section_ids:
  features: Features
  intended-audience: Intended audience
  system-requirements: System requirements
---

# PingID Provisioner

The PingID Provisioner allows PingFederate to integrate with PingID for user provisioning.

|   |                                                                                                                                                                                                                                                                                                                                                                                                 |
| - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | If you're using PingID from PingOne, you must switch to the PingOne provisioner. The PingID Provisioner isn't supported in PingOne.Learn more in [Provisioning](https://docs.pingidentity.com/pingone/integrations/p1_provisioning.html) and [PingFederate](https://docs.pingidentity.com/pingone/integrations/p1_pf_connection.html) in the Integrations section of the PingOne documentation. |

## Features

* Manages users in PingID based on changes in an external data store that is attached to PingFederate

  * Creates, updates, disables, and deletes users

  * Allows you to enable the create, update, disable, and delete capabilities independently

  * Allows you to choose whether to disable or delete users when deprovisioning

  * Allows you to provision disabled users

* Manages users' devices (authentication methods) in PingID

  * Enrolls and manages up to nine devices

  * Allows you to set the management behavior

  * Allows you to set a primary authentication device

## Intended audience

This document is intended for PingFederate administrators.

If you need help during the setup process, see the following resources:

* PingFederate documentation:

  * [SP connection management](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_sp_connect_management.html)

  * [Managing digital signing certificates and decryption keys](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/help_certmanagementtasklet_dsigsigningcert_certmanagementstate.html)

  * [Datastores](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_datastores.html)

  * [Configuring outbound provisioning](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/help_spconnectionconfigtasklet_saasprovisioningstate.html)

  * [Configuring outbound provisioning settings](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/help_protocolsettingstasklet_saasglobalprovisioningsettingsstate.html)

* PingID documentation:

  * [PingID Administration Guide](https://docs.pingidentity.com/pingid/pid_landing_page.html)

  * [Automatically update and remove PingID users](https://docs.pingidentity.com/pingid/pingid_user_life_cycle_management/pid_automatically_update_remove_pid_users.html)

## System requirements

* PingFederate 9.0 or later

* To allow PingFederate to make outbound connections, you might need to allow the one of the following endpoints in your firewall:

  * North America: idpxnyl3m.pingidentity.com

  * Europe: idpxnyl3m.pingidentity.eu

  * Australia: idpxnyl3m.pingidentity.com.au