Managing populations
PingOne allows you to organize users into populations to simplify user and policy management.
Click the appropriate tab for instructions on:
-
Viewing your existing populations and their details
-
Adding a new population
-
Making changes to a population
-
Deleting an unused population
-
Viewing populations
-
Adding a population
-
Editing a population
-
Deleting a population
Viewing populations
About this task
To view populations in PingOne:
Steps
-
Go to Directory → Populations.
-
Locate and select the population that you want to view. You can browse or search for populations.
The population details panel shows the following:
-
The Overview tab:
-
Population name: A label for the population.
-
Description (optional): A brief characterization of the population.
-
Population ID: A unique identifier for the population.
Click the Copy icon to copy the population ID to the clipboard.
-
Identity Provider (optional): The default identity provider (IdP) for the population. When nothing else is selected, PingOne is used as the default IdP during the runtime. Click the title to go to the specific identity provider. If your IdP is not enabled, the word Disabled appears next to the title.
-
-
The Configuration tab:
These settings apply only to DaVinci and are not used in sign-on policies.
-
Alternative Identifiers: A domain, ID, or custom value used to identify the population.
-
Theme: The default branding theme for this population. Learn more in Branding and themes and Adding a theme.
-
-
The Password Policy tab:
-
Password Policy: The password policy assigned to the population. Click the tile to go to the Password policies page.
-
Description: A brief characterization of the password policy.
-
Password Policy ID: The password policy ID. Click the password ID to copy it to the clipboard.
-
Password Requirements: The requirements for the password.
-
Password Policy Rules: The password rules for the policy.
-
Account Lockout Rules: The lockout rules for the account.
-
-
The Users tab:
The list of users currently in the population.
-
The Groups tab:
The list of groups currently in the population.
-
Adding a population
About this task
To add a population to PingOne:
Steps
-
Go to Directory → Populations.
-
Click the icon to add a population.
-
Enter the following:
-
Population Name: A unique label for the population.
-
Description (Optional): A brief characterization of the population.
-
Default Population: Specify the current population as the default population. Users created without a specified population are added to the default population.
If you are changing the default population, PingOne shows a confirmation message. Click Confirm.
-
-
Click Save.
Editing a population
About this task
To edit an existing population:
Steps
-
Go to Directory → Populations.
-
Locate the population that you want to edit. You can browse or search for populations.
-
Click the population entry to open the details panel.
-
On the Overview tab, click the Pencil icon and edit or enter the following:
-
Population Name: A unique label for the population.
-
Description (Optional): A brief characterization of the population.
-
Identity Provider (Optional): The default IdP for the population.
If you are changing the default IdP, PingOne shows a confirmation message. Validate the IdP configuration to avoid lockout and click Confirm.
This setting is used at runtime for users in the population who do not have Authoritative Identity Provider configured in their user profile, and only for as long as they remain in the population. When a user doesn’t have an IdP configured in their user profile, the default IdP from the population PingOne is used. If Authoritative Identity Provider is set on the user profile, that setting is used to authenticate the user. The user profile setting is not updated or changed by the setting on the population.
You must have the Identity Data Admin role to configure this setting. You can find more information in Users.
-
Default population: Specify the current population as the default population. Users created without a specified population are added to the default population.
If you change the default population, PingOne shows a confirmation message. Click Confirm.
-
-
(Optional) On the The Configuration tab, click the Pencil icon and edit or enter the following:
These settings apply only to DaVinci and aren’t used in Sign-On Policies.
-
Alternative Identifiers: A domain, ID, or custom value used to identify the population.
-
Theme: The default branding theme for this population. Learn more in Branding and themes and Adding a theme.
-
-
(Optional) On the Password Policy tab, the Standard default policy shows. Click the Pencil icon and select a different password policy that is configured in your environment.
Learn more in Password Policies.
-
(Optional) On the Users tab, browse or search for a user. Click the More Options (⋮) icon and click Manage User Profile.
Result:
The Users page opens, and the user details panel shows.
Learn how to change a user’s population in Changing a user’s population.
Users are added to the default population when a population isn’t specified during the new user creation.
-
Optional: On the Groups tab, browse or search for a group. Click the More Options (⋮) icon and click Manage Group.
Result:
The Groups page opens, and the group details panel shows.
Learn how to manage groups in Managing groups.
-
Click Save.
Deleting a population
Before you begin
-
To delete a population, you must have the Environment Admin role.
-
Before you can delete a population, you must remove all identities from it.
About this task
To use the Populations page to remove populations that you no longer need:
Steps
-
Go to Directory → Populations.
-
Locate the population that you want to delete. You can browse or search for populations.
-
Click the population entry to open the details panel.
-
Click the three dots options menu, and then click Delete.
-
Click Delete to confirm.