PingOne

Configuring outbound group provisioning

Use PingOne provisioning to sync groups along with its memberships out of PingOne to a connected SaaS application.

Before you begin

You must create a group in your PingOne admin console to select for outbound provisioning

The recommended number of groups supported in a provisioning rule for outbound group provisioning is 1000.

When syncing, you cannot sync external groups. This capability is limited to internal groups for outbound group provisioning.

Learn more in Creating a group.

About this task

The following provisioners support group provisioning:

Membership type Description

Group memberships

Memberships are a part of a group. Provisioners that support this:

  • Slack

  • SCIM

  • GitHub EMU

User memberships

Memberships are a part of a user. Provisioners that support this:

  • Google

  • Salesforce

If there is an existing group with the same name on target, provisioning merges the group and its members.

Steps

  1. Go to Integrations → Provisioning.

  2. On the Rules tab, locate the rule that you want to use, and click the rule to open the details panel.

  3. On the Configuration tab, click Group Provisioning.

    • To add groups, click Add Groups.

    • To search groups, enter a group name in the Search Group Name field.

    • To edit groups, click the Pencil icon and select a group in All Groups.

    • To remove a group, clear the check-box for the group in All Groups.

    • To view provisioned groups, click Selected groups.

    • To accept a merge or overwrite memberships when a group with the same name exists on the target, click the checkbox next to I understand and want to continue, in the Merge Group Memberships or Overwrite Group Memberships modal.

      Merging or overwriting memberships only applies to SCIM, Slack and GitHub EMU provisioning connections. Learn more in Creating a Slack connection, Creating a SCIM connection, and Creating a GitHub EMU connection.

  4. Click Save.