PingOne

Configuring outbound group provisioning

Use PingOne provisioning to sync groups along with their memberships out of PingOne to a connected software as a service (SaaS) application.

Before you begin

You must create a group in your PingOne admin console to select for outbound provisioning

The recommended number of groups supported in a provisioning rule for outbound group provisioning is 1000.

When syncing, you cannot sync external groups. This capability is limited to internal groups for outbound group provisioning.

Learn more in Creating a group.

About this task

The following provisioners support group provisioning:

Membership type Description

Group memberships

Memberships are a part of a group. Provisioners that support group memberships are:

  • GitHub EMU

  • SCIM

  • Slack

User memberships

Memberships are a part of a user. Provisioners that support user memberships are:

  • Google

  • Salesforce

If there’s an existing group with the same name on the target, provisioning merges the group and its members.

Steps

  1. In the PingOne admin console, go to to Integrations > Provisioning.

  2. On the Rules tab, locate and click the rule to open the details panel.

  3. On the Directory tab, click the Pencil icon () next to Groups .

    • To search groups, enter a group name in the Search Group Name field.

    • To add groups, select a group in All Groups.

    • To remove a group, clear the checkbox for the group in All Groups.

    • To view provisioned groups, click Selected Groups.

    • To accept a merge or overwrite memberships when a group with the same name exists on the target, select the checkbox next to I understand and want to continue in the modal.

      Merging or overwriting memberships only applies to SCIM, Slack, and GitHub EMU provisioning connections. Learn more in Creating a Slack connection, Creating a SCIM connection, and Creating a GitHub EMU connection.

  4. Click Save.