--- title: PingOne standard platform limits description: The PingOne platform includes default limits to ensure secure and reliable access for customers. component: pingone page_id: pingone:getting_started_with_pingone:p1_platform_limits canonical_url: https://docs.pingidentity.com/pingone/getting_started_with_pingone/p1_platform_limits.html revdate: March 20, 2026 section_ids: transactions: Transactions p1-rate-group-limits: Rate group entitlements p1-identity-data-limits: Identity data administration: Administration environments-populations-and-groups: Environments, populations, and groups sign-on-policies: Sign-on policies applications: Applications resources: Resources configuration: Configuration davinci-flow-limits: DaVinci flow limits identity-providers-idps: Identity providers (IdPs) gateways: Gateways provisioning: Provisioning notifications: Notifications pingone-authorize: PingOne Authorize pingone-mfa: PingOne MFA pingone-verify: PingOne Verify --- # PingOne standard platform limits The PingOne platform includes default limits to ensure secure and reliable access for all of our customers. | | | | - | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | This isn't a comprehensive list of all usage limits on PingOne. Limits on this list are subject to change. If you experience issues or have questions that aren't addressed in the following tables, contact your solution architect or open a support case in the Ping Identity [Support Center](https://www.pingidentity.com/en/support/support-center.html). | ## Transactions | Type | Limit | | ---------------------------- | ------------------------------------------------------- | | HTTP API request header size | 6 KB | | SMS messages | 50 per day per user | | Email messages | 50 per day per user | | Gateway requests | 500 per second per gateway instance | | Webhook delivery | 500 messages of 1 KB each per POST, 72 POSTs per second | ## Rate group entitlements PingOne sets rate limits based on your purchased PingOne products, as well as the product APIs licensed in your product license. Rate groups, which are groups of endpoints related to a particular product or service, each have their own rate limit entitlements. | | | | - | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | Enforcement of the rate entitlement values for the rate groups listed in the following table will begin at some point after September 2025. You can use the **API Usage Dashboard** now to track your usage and determine if the existing entitlements will be sufficient to meet the needs of your business when enforcement starts. Learn more in [API Usage Dashboard](../settings/p1_api_usage_dashboard.html) and [Rate Limits and Allowed IPs](../settings/p1_rate_limits.html). | The rate groups listed in this table are those for which you can purchase additional capacity through our Maximum Throughput Assurance program. You can find a detailed listing of all rate groups, including their base entitlements and associated endpoints, in [Base rate limits](https://developer.pingidentity.com/pingone-api/platform/rate-limiting/base-rate-limits.html) in the PingOne API documentation. | Product | Rate Group | | ----------- | --------------------------------------- | | Authorize | Authorization API Rate | | Credentials | Credentials Issuance and Check API Rate | | DaVinci | Flow Execution (post-start) Rate | | DaVinci | Flow Progression and Callbacks | | DaVinci | Flow Start (invocation) Rate | | Directory | Data Read Rate | | Directory | Data Write Rate | | MFA | MFA Polling Rate | | MFA | MFA API Rate | | Protect | Protect API Rate | | SSO | SSO API Rate | | SSO | Token Check Rate | | Verify | Verification API Rate | ## Identity data | Type | Limit | | --------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Custom attribute schema | Maximum of 200 string attributes and 200 JSON attributes | | Combined size of custom string and custom JSON attributes | Maximum is determined by the current, cumulated size of the user profile, which must not exceed 16 KB. Learn more in [Custom attributes](https://developer.pingidentity.com/pingone-api/platform/schemas.html#custom-attributes) in the PingOne API documentation. | ## Administration | Type | Limit | | ----------------------------------------------- | ---------- | | Admin groups | 500 | | Role assignments per admin group | 3500 | | Population level role assignments | 250 | | Custom roles | 50 | | Role assignments per user or Worker application | 3500 roles | | Application level role assignments | 250 | ## Environments, populations, and groups | Type | Limit | | ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Environments | Varies by subscription plan:- Trial plan max: 5 per organization - Platform max: * 500 active environments per organization * 100 environments in "Delete Pending" status per organizationFor limits specific to your plan, contact Support or your solution architect. | | Populations | 10,000 per environment | | Groups | 100,000 per environment | | Nested groups | 250 nested groups per groupThis limit includes the combination of nesting levels plus the number of groups at each level. | | Identities | 1 million per environment for trial plans, up to 100 million per environment depending on your contract | | Group memberships | 10,000 per identity. Due to size limits on ID tokens, the number of groups returned in a token could be lower. | | PingOne Advanced Services or PingID deployments | 100 per organization | ## Sign-on policies | Type | Limit | | ---------------- | ------------------- | | Sign-on policies | 100 per environment | | Steps/actions | 21 per policy | ## Applications | Type | Limit | | ------------------------------------------------- | ----------------------------------- | | Applications (including Application portal links) | 4000 per environment | | Application attribute mappings | 100 per application | | Sign-on policies or DaVinci flow policies | 20 per application | | Terms of service text | 32,000 characters per revision text | | Virtual server IDs (SAML applications) | 200 per application | ## Resources | Type | Limit | | ---------------- | -------------------- | | Custom resources | 1000 per environment | ## Configuration | Type | Limit | | ------------------- | ------------------- | | Custom domains | Paid plans only | | Email customization | Paid plans only | | Webhooks | 50 per environment | | Email trust domains | 50 per environment | | Themes | 100 per environment | | Forms | 100 per environment | ## DaVinci flow limits | Property | Limit | Description | | --------------------------------------------------- | ------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Resource | 100 | Your environment can contain a maximum of 100 of each entity type. This limitation applies to flows, variables, and connections, but not to end users. Each flow is limited to 100 stored versions. | | API payload | 10 MB | The maximum payload size for any API call (such as POST, GET, or DELETE) made within a flow. | | Number of nodes that can be run per flow invocation | 20 | If a flow repeats one or more nodes, each node can run a maximum of 20 times. This limitation doesn't apply to polling nodes. | | Flow timeout | Default is 5 minutes. Maximum possible is 2 days. | A timeout value for the entire flow, beginning when the flow is invoked.Editable for each flow. Learn more in [Editing flow settings](https://docs.pingidentity.com/davinci/flows/davinci_editing_flow_settings.html) in the DaVinci documentation. | | Flow HTTP response timeout | Default is 15 seconds. Maximum possible is 120 seconds. | A timeout value for any HTTP call made by any node in the flow\.Editable for each flow. Learn more in [Editing flow settings](https://docs.pingidentity.com/davinci/flows/davinci_editing_flow_settings.html) in the DaVinci documentation. | | Node payload | 1 - 10 MB (depending on the node) | The maximum size of the payload sent by a node to future nodes. | Learn more in [DaVinci flow limits](https://docs.pingidentity.com/davinci/flows/davinci_flow_limits.html) in the DaVinci documentation. ## Identity providers (IdPs) | Type | Limit | | ------------------- | -------------------- | | IdPs | 1000 per environment | | IdP discovery rules | 200 | ## Gateways | Type | Limit | | ---------- | ------------------------------ | | Gateways | 20 gateways per environment | | User Types | 20 user types per LDAP gateway | ## Provisioning | Type | Limit | | --------- | -------------------- | | Revisions | 1000 per environment | | Stores | 4196 per environment | | Rules | 4196 per environment | | Mappings | 4196 per environment | ## Notifications | Type | Limit | | ----- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Email | The following limits apply if you're sending email notifications using the Ping Identity email service:- Trial plans: 100 per day per environment - Paid plans: 1.5 million email notifications per day per environment - **Administrators** environment: 100 per day, regardless of planThe daily notification counters reset every night at midnight UTC. | ## PingOne Authorize | Type | Limit | | --------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Unnamed versions | 500 per environment | | Named versions | 100 per environment | | Version data size | 7 MB per version | | User-defined entities or configurations | 4000 per environmentThis limit includes policies, policy sets, statements, rules, targets, attributes, services, named conditions, and named processors. System-owned entities and inline conditions and processors in policies don't count toward this limit. | | Managed entities or configurations | 6000 per environment | | Decision endpoints | 30 per environment | | Recent decisions | 20 per decision endpoint | | Service caching | Service response size: 1 MBTime to live: 24 hours maximumLearn more about service limits in [Service configuration constraints](../authorization_using_pingone_authorize/p1az_service_configuration_constraints.html). | | API services | 25 per environment | | API operations | 25 per API service | | API gateway request size | 2 MB (2,000,000 bytes) per requestThis limit applies to requests sent from API gateway integration kits to PingOne Authorize. | | External OAuth servers | 25 per environment | | JWKS caching | Time to live: 3600 seconds | | Application roles | 128 per environment | | Application resources | 128 per environment | | Application permissions | 128 per environment | | Application permission assignments | 1024 per role | ## PingOne MFA | Type | Limit | | -------------- | ----------- | | Active devices | 20 per user | ## PingOne Verify | Type | Limit | | ---------------------- | -------- | | Hourly authentications | No limit | | Daily authentications | No limit | | | | | - | ---------------------------------------------------------------------------------------------------------------- | | | Ping Identity customers aren't limited by how many verify transactions or document authentications they perform. |