Provisioning options reference

The Salesforce Connector allows you to enable the create, update, and disable capabilities independently and customize other provisioning options.

Field Name Description

User Create

Selected (default): PingFederate creates users in Salesforce.

Cleared: PingFederate does not create users in Salesforce.

User Update

Selected (default): PingFederate updates existing users in Salesforce.

Cleared: PingFederate does not update existing users in Salesforce.

User Disable

Selected (default): PingFederate disables users in Salesforce.

Cleared: PingFederate does not disable users in Salesforce.

Freeze Users Instead of Disable

This setting only applies when User Disable is True.

Selected: When deprovisioning, PingFederate freezes a user. The frozen user can’t log in, but the user’s data, such as profile and activity, is still visible to other users in Salesforce.

Learn more about how to Freeze or Unfreeze User Accounts in the Salesforce documentation.

Cleared (default): When deprovisioning, PingFederate disables a user. The user can’t log in and their data is not visible to other users in Salesforce.

PingFederate can only unfreeze users when this is selected. PingFederate can only reenable users when this is cleared.

Provision Disabled Users

This setting only applies when User Disable is True and the provisioning connector targets a user in the datastore with a "disabled" status.

Selected (default): PingFederate creates a user in Salesforce with a "disabled" status.

Cleared: PingFederate does not create a user in Salesforce.

If any of the preceding options are cleared, PingFederate logs a warning in the user workflow section of provisioner.log when the related action fails.

Permission Set Management

Merge with permission sets in Salesforce (default): When a permission set is added in the datastore, PingFederate adds it to the user’s existing permission sets in Salesforce. PingFederate doesn’t remove any permission sets added in Salesforce by other sources.

Overwrite permission sets in Salesforce: When a permission set is added or removed in the datastore, PingFederate overwrites the user’s permission sets in Salesforce with those from the datastore.