PingOne

Revoking a credential

You can revoke a credential if it’s no longer valid and should be removed.

To revoke a credential, you change the issuance rule or SCIM filter. You can either remove or change the group, population, or custom filter so that the user doesn’t match anymore. You can also revoke a credential from a user in the Users page. Learn more in Managing a user’s credentials.

You can only delete a credential through the API.

To revoke credentials in PingOne Credentials:

Steps

  1. In the PingOne admin console, go to Digital Credentials > Schemas.

  2. Click the relevant credential to open the details panel.

  3. In the Population, Group, or Custom tab, click the Pencil icon ()

    Choose from:

    • Select Populations and in the Selected Populations tab, click the population to revoke credentials.

    • Select Groups and in the Selected Groups tab, click the group to revoke credentials.

    • Select Custom and delete or edit conditions as needed to revoke permissions based on different criteria.

  4. Click Update.

Result

Credentials for users no longer meeting the criteria are revoked.