---
title: Configuration overview
description: To operate Delegated Admin, you must install and configure PingDirectory server and have one of the following identity provider (IdP) options available:
component: pingdirectory
version: 11.0
page_id: pingdirectory:delegated_admin_application_guide:pd_da_config_overview
canonical_url: https://docs.pingidentity.com/pingdirectory/11.0/delegated_admin_application_guide/pd_da_config_overview.html
revdate: September 13, 2023
---

# Configuration overview

To operate Delegated Admin, you must install and configure PingDirectory server and have one of the following identity provider (IdP) *(tooltip: \<div class="paragraph">
\<p>A service that manages identity information and provides authentication services to relying clients or SPs within a federated or distributed network.\</p>
\</div>)* options available:

* An installed and configured PingFederate server

* Other configured OpenID Connect (OIDC) *(tooltip: \<div class="paragraph">
  \<p>An authentication protocol built on top of OAuth that authenticates users and enables clients (relying parties) of all types to request and receive information about authenticated sessions and users. OIDC is extensible, allowing clients to use optional features such as encryption of identity data, discovery of OpenID Providers (OAuth authorization servers), and session management.\</p>
  \</div>)* providers

For installation instructions, see the documentation for each product. Learn more about the Delegated Admin [Installation requirements](../installing_the_pingdirectory_suite_of_products/pd_da_install_requirements.html).

To configure support for [Delegated Admin on a PingDirectory server](pd_da_config_delegated_admin_rights_pd_server.html), complete the following tasks:

* Configure users as Delegated Admin administrators.

* Configure attributes and attribute searching.

* Configure groups whose management requires delegation.

To configure support for [using PingFederate as the IdP](pd_da_config_pf_server.html), complete the following tasks:

* Configure PingFederate as the identity provider for Delegated Admin.

* Configure PingFederate as the OAuth server for Delegated Admin.

* Register Delegated Admin as a client.

* Register the PingDirectory server as an OAuth token validator client.

To configure support for [using an OIDC provider as the IdP](pd_da_config_oidc_idp.html), complete the following tasks:

* Configure the OIDC provider as the identity provider for Delegated Admin.

* Configure an identity mapper.

* Configure an access token validator.