PingFederate Server

Configuring the PingOne for Enterprise Directory Password Credential Validator

The PingOne for Enterprise Directory Username Password Credential Validator (PCV) verifies credentials stored in your PingOne for Enterprise Directory.

Before you begin

To use the PingOne for Enterprise PCV, you must have:

  • A PingOne for Enterprise account

  • A PingFederate account

For more information, see Managing PingOne for Enterprise Directory users in the PingOne for Enterprise documentation.

Steps

  1. On the Instance Configuration tab, enter your account information in Client ID and Client Secret.

For more information about each field, refer to the following table. All fields are required.

Field Description

Client ID

The REST API client ID is a unique identifier PingFederate uses to identify itself to the PingOne for Enterprise Directory API.

For more information, see View or renew directory API credentials in the PingOne for Enterprise documentation.

Client Secret

The client secret is used to authenticate the client ID against the PingOne for Enterprise Directory API.

For more information, see View or renew directory API credentials in the PingOne for Enterprise documentation.

Advanced Fields

PingOne URL

The PingOne for Enterprise Directory API.

The default value is https://directory-api.pingone.com/api.

Authenticate by Subject URL

The relative path for user authentication.

The default value is /directory/users/authenticate?by=subject.

Reset Password URL

The relative path for password reset.

The default value is /directory/users/password-reset.

SCIM User URL

The relative path for searching users requesting password reset.

The default value is /directory/user.

Connection Pool Size

The maximum size of the connection pool to PingOne for Enterprise Directory.

The default value is 100.

Connection Pool Idle Timeout

The maximum time (in milliseconds) that a connection can remain idle before it is closed and removed from the connection pool.

The default value is 4000.