---
title: Provisioning options reference
description: Lists the main provisioning capabilities available in the Zscaler connection configuration.
component: zscaler
page_id: zscaler:zscaler_private_access_provisioner:pf_zscaler_zpa_connector_provisioning_options_reference
canonical_url: https://docs.pingidentity.com/integrations/zscaler/zscaler_private_access_provisioner/pf_zscaler_zpa_connector_provisioning_options_reference.html
revdate: June 18, 2024
---

# Provisioning options reference

Lists the main provisioning capabilities available in the Zscaler connection configuration.

| Field Name                                                                                                                                                    | Description                                                                                                                                                                                                                                                                                                                                                                                                                   |
| ------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **User Create**                                                                                                                                               | **Selected** (default) – PingFederate creates users in Zscaler.**Cleared** – PingFederate does not create users in Zscaler.                                                                                                                                                                                                                                                                                                   |
| **User Update**                                                                                                                                               | **Selected** (default) – PingFederate updates existing users in Zscaler.**Cleared** – PingFederate does not update existing users in Zscaler.                                                                                                                                                                                                                                                                                 |
| **User Disable / User Delete**                                                                                                                                | **Selected** (default) – PingFederate disables or deletes users in Zscaler according to the **Remove User Action** setting.**Cleared** – PingFederate does not disable or delete users in Zscaler.                                                                                                                                                                                                                            |
| 

If any of the above options are cleared, PingFederate logs a warning in the user workflow section of provisioner.log when the related action fails. |                                                                                                                                                                                                                                                                                                                                                                                                                               |
| **Remove User Action**                                                                                                                                        | This option applies when **User Disable / User Delete** is selected and either of the following is true:- a previously provisioned user no longer meets the condition set on the **Source Location** tab.

- a user has been disabled or deleted from the data store.**Disable** (default) – PingFederate disables the user in Zscaler Private Access.**Delete** – PingFederate deletes the user from Zscaler Private Access. |