Editing an inbound rule

You can edit an existing inbound rule to change the custom filter and attribute mapping.

You can’t change the source or target connection after a rule is created.

Steps

In the PingOne admin console, go to Integrations > Provisioning.

On the Rules tab, click the appropriate rule to open the details panel to edit the following:

On Overview tab, click the Pencil icon () to edit the Name or Description.

On the Directory tab, click next to Users to enter or edit the following:

Click Add + to add another condition or condition set.

Select All or Any to determine how the linked conditions will be evaluated: Boolean logical AND or OR.
Attribute: The user attribute on which to filter.
Operator: Supports operators sw (starts with), ew (ends with), co (contains), eq (equals) and is case-sensitive for software as a service (SaaS) provisioners.

Value: Enter the appropriate value.

If you select a group in the filter, updating or deleting the group can cause the provisioning rule to resync.

If you select a group in the filter, the filter will include all users with any kind of membership in the group. Learn more in Groups.

To delete a condition, click the Delete icon ().

On the Users tab:

To add an attribute mapping, click Add and enter the source and target attributes.
To add a new source attribute, enter the attribute name. In the list, select the ADD:ADD:<attribute-name> attribute. Map the added attribute to a target attribute.
To use the expression builder, click the Gear icon (). Learn more in Using the expression builder.

To delete a mapping, click Delete icon ().

On the Groups tab, the group attribute mappings can’t be edited.

Group membership updates aren’t immediately synced to PingOne. To sync group membership, you must either modify an additional user attribute or initiate a manual synchronization through the PingOne admin console.

Click Save.