--- title: Configuration management and promotion in PingOne description: Use the native PingOne promotion capabilities to automate the promotion of configuration resources from one environment to another. component: pingone page_id: pingone:promote:p1_promote canonical_url: https://docs.pingidentity.com/pingone/promote/p1_promote.html llms_txt: https://docs.pingidentity.com/pingone/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md revdate: 2026-11-09T21:54:18Z section_ids: core-principles: Core principles key-capabilities: Key capabilities p1-promotion-constraints: Configuration management constraints and considerations p1-promotion-retention: Promotion retention alternative-promotion-strategies: Alternative promotion strategies --- # Configuration management and promotion in PingOne The **Promote** section provides access to the native PingOne configuration management tools. These tools allow you to automate the promotion of configuration resources (such as applications, PingOne DaVinci flows, and policies) from one environment to another environment directly from the PingOne admin console of the source environment. | | | | - | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | You can also use the PingOne configuration management APIs to perform promotions. Learn more in [Configuration Management](https://developer.pingidentity.com/pingone-api/platform/configuration-management/index.html) in the PingOne API documentation. | PingOne configuration management offers a secure, structured way to promote configuration resources across environments. This automated process streamlines resource deployment and eliminates manual production changes, which reduces errors and downtime. At the start of the promotion process, PingOne generates snapshots of your source and target environments, compares the two, and provides information about the environment resources that can be promoted. You can promote a single configuration resource or multiple resources. ## Core principles PingOne configuration management is based on the following principles: * Treat configuration management as a release discipline, rather than a convenience feature. * Maintain production as the output of tested promotion workflows, instead of a place to make direct configuration changes. * Encourage small, incremental promotions to simplify testing and troubleshooting. * Standardizing environment-specific values at the start ensures that promotions are repeatable and predictable. ## Key capabilities The following key capabilities of native PingOne configuration management are essential to the success of your promotion workflows: * The ability to create, update, and delete configuration resources seamlessly across environments. * Dynamic configuration support using promotion variables to manage environment-specific resource differences. * Automatic dependency management to ensure smooth transitions between environments. * Rollback support so that you can revert the most recent promotion and restore resources to their previous state instantly in the event of errors or unexpected outcomes. * Auditing and reporting features to provide oversight and ensure compliance. ## Configuration management constraints and considerations Before you start using PingOne configuration management, review the following constraints and considerations to ensure that it meets your needs and to understand how to use it effectively. * You can promote to only one target environment at a time from PingOne and the environments must be in the same PingOne organization. Cross-organization promotions aren't currently supported. * You can promote up to 100 configuration resources in a single promotion. Dependencies that are automatically included with the selected resource don't count toward this limit. * Full environment promotions (promoting all configuration resources from one environment to another) aren't currently supported, unless the environment contains fewer than 100 configuration resources. Resources must be configured individually. There is no select all option. * The following PingOne services don't support configuration promotion: * PingOne Authorize * PingOne Credentials * PingOne Privilege * PingOne Recognize * You must have the Promotion Admin role or a custom role with equivalent permissions in both the source and target environments to create and complete promotions and to create and assign promotion variables. * Both the source and target environments should include the same PingOne services, connected products, and licensing. For example, if your source environment includes PingOne MFA and PingOne Protect, your target environment should also include PingOne MFA and PingOne Protect. If you try to promote configuration resources from your source environment for a service that your target environment doesn't include, you might cause issues in your target environment. * Runtime and user data can't be promoted. For example, user profiles, session and device data, and audit logs can't be promoted. You can find a complete list of non-promotable data in [Excluded Resources](https://developer.pingidentity.com/pingone-api/platform/configuration-management/promotions/excluded-resources.html) in the PingOne API documentation. Learn more in the following topics: * [Key concepts](p1_promotion_key_concepts.html) * [Best practices](p1_promotion_best_practices.html) * [Resources requiring special handling](p1_configuration_management_special_handling.html) ## Promotion retention The following retention policies apply to promotions in PingOne: * You can create a maximum of 1000 promotions per environment. * The five most recent promotions are retained at all times. * Promotions older than 90 days are deleted from the system unless they're one of the five most recent promotions. * Promotions in the following statuses are removed if they're more than 30 days old, unless they're one of the five most recent promotions: * Ready * Failed * In Progress * New ## Alternative promotion strategies If your organization uses Terraform for infrastructure as code (IaC), you can leverage official PingOne Terraform providers to manage configuration promotion. Learn more in the [PingOne Cloud - Getting started](https://developer.pingidentity.com/terraform/products/pingone/getting_started.html) section of the Configuration Automation - Terraform documentation. Similarly, if your organization has well-established DevOps and DevSecOps teams, you might already have mechanisms in place to automate PingOne configuration management. Discuss these options with your internal stakeholders to determine the best promotion path for your needs. Avoid mixing promotion models if possible. If you use more than one, ensure that you establish clear boundaries and ownership for each model.