Task 2: Explore the platform

Advanced Identity Cloud provides an administrative console to help you manage your tenant. Take some time to explore this console and understand its functions.

While the administration consoles are ideal for many tasks, you can also manage your tenant using REST APIs. Learn more in Advanced Identity Cloud API reference.

Advanced Identity Cloud admin console

This console is designed to handle most day-to-day tasks associated with managing your tenant. Use the Advanced Identity Cloud admin console to manage all aspects of your tenant including realms, identities, applications, user journeys, and password policy.

Summary of tasks you can perform in the Advanced Identity Cloud admin console

Task type	Example tasks
Tenant administration and configuration	Invite administrators. Set up federated access to the tenant. Manage global settings, such as: Cross-Origin Resource Sharing (CORS) Environment Secrets & Variables (ESVs) Log API keys Service accounts Content Security Policy (CSP) Outbound static IP addresses
Monitoring and reporting	View system usage on an analytics dashboard. Run basic reports, monitor jobs, and view audit logs.
Identity configuration	Manage object types (managed objects) and their properties. Manage relationships between managed object types.
Identity management	Manage end-user profiles and accounts. Manage security options such as password policies for end users. Set up terms and conditions for end users. Manage provisioning to automate the lifecycle of identity data between Advanced Identity Cloud and an external system.
Application and access management	Register and manage applications and OAuth 2.0 clients. Manage gateways and agents for connecting to your resources.
End-user experience and journeys	Create authentication and self-service journeys. Set up and brand hosted pages. Customize email templates for user communication.
Automation and extensibility	Create scripts to customize platform behavior. Create event hooks to trigger external workflows.

Task type

Example tasks

Tenant administration and configuration

Invite administrators.
Set up federated access to the tenant.
Manage global settings, such as:
- Cross-Origin Resource Sharing (CORS)
- Environment Secrets & Variables (ESVs)
- Log API keys
- Service accounts
- Content Security Policy (CSP)
- Outbound static IP addresses

Monitoring and reporting

View system usage on an analytics dashboard.
Run basic reports, monitor jobs, and view audit logs.

Identity configuration

Manage object types (managed objects) and their properties.
Manage relationships between managed object types.

Identity management

Manage end-user profiles and accounts.
Manage security options such as password policies for end users.
Set up terms and conditions for end users.
Manage provisioning to automate the lifecycle of identity data between Advanced Identity Cloud and an external system.

Application and access management

Register and manage applications and OAuth 2.0 clients.
Manage gateways and agents for connecting to your resources.

End-user experience and journeys

Create authentication and self-service journeys.
Set up and brand hosted pages.
Customize email templates for user communication.

Automation and extensibility

Create scripts to customize platform behavior.
Create event hooks to trigger external workflows.

Find the release version and release notes

To check the release version and view the latest release notes:

In Advanced Identity Cloud admin console, scroll to the page footer and click the release version. For example, PingOne Advanced Identity Cloud 19573.0. The Tenant Settings page opens.
On the Tenant Settings > Details tab, click Release Notes to display the release notes for the latest version.

The Tenant Settings page displays a banner showing the next scheduled regular release date.

Native admin consoles

The Advanced Identity Cloud admin console is the primary console for managing your tenant. The native consoles provide access to selected access management configuration and legacy identity management configuration.

Use a native console only when the relevant task is documented there. For all other tasks, use the Advanced Identity Cloud admin console.

AM native admin console

Use the AM native admin console to configure advanced access and security features that aren’t yet exposed in the main console.

Summary of tasks you can perform in the AM native admin console

Task type	Description
SAML 2.0 configuration	While you can create basic SAML applications in the main admin console, use the native console for deeper SAML entity configuration.
Advanced authorization policy management	Configure detailed validation policies.
Advanced realm services	Configure low-level, realm-specific services, such as realm-specific session policies.
Secret store mapping	Map secrets stored in the ESVs to the underlying access management configuration, when integrating with other Ping Identity components or services such as PingOne Protect.

Task type

Description

SAML 2.0 configuration

While you can create basic SAML applications in the main admin console, use the native console for deeper SAML entity configuration.

Advanced authorization policy management

Configure detailed validation policies.

Advanced realm services

Configure low-level, realm-specific services, such as realm-specific session policies.

Secret store mapping

Map secrets stored in the ESVs to the underlying access management configuration, when integrating with other Ping Identity components or services such as PingOne Protect.

To open the AM native admin console:

In the Advanced Identity Cloud admin console, click Native Consoles > Access Management.

IDM native admin console

The IDM native admin console is deprecated and planned for removal. Use the Advanced Identity Cloud admin console wherever the required functionality is available.

PingOne Advanced Identity Cloud