Provisioning options reference

The Salesforce Connector allows you to enable the create, update, and disable capabilities independently, and customize other provisioning options.

Field Name Description

User Create

Selected (default) – PingFederate creates users in Salesforce.

Cleared – PingFederate does not create users in Salesforce.

User Update

Selected (default) – PingFederate updates existing users in Salesforce.

Cleared – PingFederate does not update existing users in Salesforce.

User Disable

Selected (default) – PingFederate disables users in Salesforce.

Cleared – PingFederate does not disable users in Salesforce.

Freeze Users Instead of Disable

This setting only applies when User Disable is True.

Selected – When deprovisioning, PingFederate freezes a user. The frozen user cannot log in, but the user’s data, such as profile and activity, is still visible to other users in Salesforce.

See Freeze or Unfreeze User Accounts in the Salesforce documentation.

Cleared (default) – When deprovisioning, PingFederate disables a user. The user cannot log in, and their data is not visible to other users in Salesforce.

PingFederate can only unfreeze users when this is selected. PingFederate can only re-enable users when this is cleared.

Provision Disabled Users

This setting only applies when User Disable is True, and the provisioning connector targets a user in the data store that has a "disabled" status.

Selected (default) – PingFederate creates a user in Salesforce with a "disabled" status.

Cleared – PingFederate does not create a user in Salesforce.

If any of the above options are cleared, PingFederate logs a warning in the user workflow section of provisioner.log when the related action fails.

Permission Set Management

Merge with permission sets in Salesforce (default) – When a permission set is added in the data store, PingFederate adds it to the user’s existing permission sets in Salesforce. PingFederate does not remove any permission sets added in Salesforce by other sources.

Overwrite permission sets in Salesforce – When a permission set is added or removed in the data store, PingFederate overwrites the user’s permission sets in Salesforce with those from the data store.