---
title: Provisioning options reference
description: The Salesforce Connector allows you to enable the create, update, and disable capabilities independently and customize other provisioning options.
component: salesforce
page_id: salesforce:salesforce_provisioner:pf_salesforce_connector_provisioning_options_reference
canonical_url: https://docs.pingidentity.com/integrations/salesforce/salesforce_provisioner/pf_salesforce_connector_provisioning_options_reference.html
revdate: July 5, 2024
---

# Provisioning options reference

The Salesforce Connector allows you to enable the create, update, and disable capabilities independently and customize other provisioning options.

| Field Name                                                                                                                                                        | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **User Create**                                                                                                                                                   | **Selected** (default): PingFederate creates users in Salesforce.**Cleared**: PingFederate does not create users in Salesforce.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| **User Update**                                                                                                                                                   | **Selected** (default): PingFederate updates existing users in Salesforce.**Cleared**: PingFederate does not update existing users in Salesforce.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| **User Disable**                                                                                                                                                  | **Selected** (default): PingFederate disables users in Salesforce.**Cleared**: PingFederate does not disable users in Salesforce.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| **Freeze Users Instead of Disable**                                                                                                                               | This setting only applies when **User Disable** is **True**.**Selected**: When deprovisioning, PingFederate freezes a user. The frozen user can't log in, but the user's data, such as profile and activity, is still visible to other users in Salesforce.Learn more about how to [Freeze or Unfreeze User Accounts](https://help.salesforce.com/articleView?id=users_freeze.htm\&type=0) in the Salesforce documentation.**Cleared** (default): When deprovisioning, PingFederate disables a user. The user can't log in and their data is not visible to other users in Salesforce.

PingFederate can only unfreeze users when this is selected. PingFederate can only reenable users when this is cleared. |
| **Provision Disabled Users**                                                                                                                                      | This setting only applies when **User Disable** is **True** and the provisioning connector targets a user in the datastore with a "disabled" status.**Selected** (default): PingFederate creates a user in Salesforce with a "disabled" status.**Cleared**: PingFederate does not create a user in Salesforce.                                                                                                                                                                                                                                                                                                                                                                                                         |
| 

If any of the preceding options are cleared, PingFederate logs a warning in the user workflow section of provisioner.log when the related action fails. |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| **Permission Set Management**                                                                                                                                     | **Merge with permission sets in Salesforce** (default): When a permission set is added in the datastore, PingFederate adds it to the user's existing permission sets in Salesforce. PingFederate doesn't remove any permission sets added in Salesforce by other sources.**Overwrite permission sets in Salesforce**: When a permission set is added or removed in the datastore, PingFederate overwrites the user's permission sets in Salesforce with those from the datastore.                                                                                                                                                                                                                                      |