PingOne Advanced Identity Cloud

Task 2: Explore the platform

Advanced Identity Cloud provides three administrative consoles to help you manage your tenant. Take some time to explore these consoles and understand their primary functions.

Overview of the three admin consoles

  1. a Advanced Identity Cloud admin console

  2. b AM native admin console

  3. c IDM admin console

While the administration consoles are ideal for many tasks, you can also manage your tenant using REST APIs. Learn more in Advanced Identity Cloud API reference.

Learn more about the Advanced Identity Cloud admin consoles in this demo: Demo: Navigate the Advanced Identity Cloud Admin UI (10.33 minutes)

Advanced Identity Cloud admin console

This is the primary console, designed to handle most day-to-day tasks associated with managing your tenant. Use the Advanced Identity Cloud admin console to manage all aspects of your tenant including realms, identities, applications, user journeys, and password policy.

Summary of tasks you can perform in the Advanced Identity Cloud admin console
Task type Example tasks

Tenant administration and configuration

  • Invite administrators.

  • Set up federated access to the tenant.

  • Manage global settings, such as:

    • Cross-Origin Resource Sharing (CORS)

    • Environment Secrets & Variables (ESVs)

    • Log API keys

    • Service accounts

    • Content Security Policy (CSP)

    • Outbound static IP addresses

Monitoring and reporting

  • View system usage on an analytics dashboard.

  • Run basic reports, monitor jobs, and view audit logs.

Identity management

  • Manage end-user profiles and accounts.

  • Manage security options such as password policies for end users.

  • Set up terms and conditions for end users.

Application and access management

  • Register and manage applications and OAuth 2.0 clients.

  • Manage gateways and agents for connecting to your resources.

End-user experience and journeys

  • Create authentication and self-service journeys.

  • Set up and brand hosted pages.

  • Customize email templates for user communication.

Automation and extensibility

  • Create scripts to customize platform behavior.

  • Create event hooks to trigger external workflows.

Find the release version and release notes

To check the release version and view the latest release notes:

  1. In Advanced Identity Cloud admin console, scroll to the page footer and click the release version. For example, PingOne Advanced Identity Cloud 19573.0. The Tenant Settings page opens.

  2. On the Tenant Settings > Details tab, click Release Notes to display the release notes for the latest version.

    View release notes
The Tenant Settings page displays a banner showing the next scheduled regular release date.

Native admin consoles

These are secondary consoles, intended for specialist tasks when configuring access management (AM) and identity management (IDM). They let you access functionality not yet available in the Advanced Identity Cloud admin console.

You don’t need separate credentials to access these consoles. If you’re signed onto the Advanced Identity Cloud admin console, you can seamlessly switch from one console to another.

AM native admin console

Use the AM native admin console to configure advanced access and security features needed for your identity solution.

Summary of tasks you can perform in the AM native admin console
Task type Description

SAML 2.0 configuration

While you can create basic SAML applications in the main admin console, use the native console for deeper SAML entity configuration.

Advanced authorization policy management

Configure detailed validation policies.

Advanced realm services

Configure low-level, realm-specific services, such as advanced OAuth 2.0 provider settings and realm-specific session policies.

Secret store mapping

Map secrets stored in the ESVs to the underlying access management configuration, when integrating with other Ping Identity components or services such as PingOne Protect.

To open the AM native admin console:

  • In the Advanced Identity Cloud admin console, click Native Consoles > Access Management.

IDM native admin console

Use the IDM native admin console for advanced data modeling, synchronization setup, and resource connection configuration.

Summary of tasks you can perform in the IDM native admin console
Task type Description

Identity modeling

Configure managed identity schemas and policy enforcement.

Sync/provisioning

Configure connectors (connection details, complex attribute mapping, data transformation scripts).

Data integrity

Configure detailed validation policies for managed objects.

To open the IDM native admin console:

  • In the Advanced Identity Cloud admin console, click Native Consoles > Identity Management.