PingOne

Adding a user filter

Add a user filter to specify which identities are provisioned, based on factors such as population, group, or other user attributes.

To map PingOne user attributes from an external identity store, learn more in Adding attribute mapping for outbound provisioning.

Steps

  1. In the PingOne admin console, go to Integrations > Provisioning.

  2. Click the Rules tab.

  3. Find the appropriate rule and click it to show the rule details.

  4. Click the Configuration tab.

  5. Click User Filter.

    Inbound provisioning rules have an LDAP filter rather than a user filter. Learn more in Adding an LDAP filter.

  6. Click the Pencil icon to edit the filter.

  7. Define the filter determines which identities are provisioned. Learn more in Example user filters.

  8. Enter the first condition:

    • Select All or Any to determine how the linked conditions will be evaluated: Boolean logical AND or OR.

    • Attribute: The user attribute to filter on.

    • Operator: Equals is the only operator supported at this time.

    • Value: Enter the appropriate value.

      If you select a group in the filter, updating or deleting the group can cause the provisioning rule to resync.

      If you select a group in the filter, the filter will include all users with any kind of membership in the group. Learn more in Groups.

  9. (Optional) Click Add + to add another condition or condition set.

  10. Click Save.

Example user filters

This section shows some example user filters to define users for provisioning.

Example 1

A filter that includes users from the USA and Canada. Include users that match the following:

Country Code Equals US

OR

Country Code Equals CA

A screen capture of a user filter that matches users from the US and Canada

Example 2

A filter that includes users from the following populations:

Population Name Equals Marketing

OR

Population Name Equals HR

A screen capture of a user filter that matches users from the Marketing and HR populations

Example 3

A filter that includes enabled users from the following populations:

Population Name Equals Marketing

OR

Population Name Equals HR

AND

Enabled Equals true

A screen capture of a user filter that matches enabled users from the Marketing and HR populations

Example 4

A filter that includes users from the Engineering and Marketing groups. Include users that match the following:

Group Names Contains Engineering

OR

Group Names Contains Marketing

A screen capture of a user filter that matches users from the Engineering and Marketing groups