PingOne Advanced Identity Cloud

Advanced sync

Advanced sync in Advanced Identity Cloud lets you define one or more mappings that control how data flows between application object types and managed object types during reconciliation. Instead of a single "inbound/outbound" mapping, you can create multiple, independent mappings, enabling more complex provisioning and reconciliation use cases.

Each advanced sync mapping controls the following:

  • Direction (source versus target)

  • Correlation (how records match)

  • Attribute mappings (with transforms, conditions, defaults)

  • Situation rules (create, update, link, delete, ignore)

  • Schedules, event hooks, and advanced performance settings

Advanced sync use cases

The following table describes common use cases for advanced sync.

Method Use cases

Application advanced sync

  • Sync accounts between an application and workforce identities.

    For example, map a Salesforce user to an Alpha realm user, including identifiers, profile data, and entitlements.

  • Bridge two applications through Advanced Identity Cloud.

    For example, map Workday workers to ServiceNow users, with Advanced Identity Cloud acting as the central identity platform.

  • Extend default app mappings.

    When a catalog application creates a default mapping, use advanced sync to add additional mappings without changing the default.

Managed object advanced sync

  • Review all systems that sync a given managed object type.

    For example, open Alpha realm – User to view mappings between users and:

    • HR or directory systems

    • SaaS applications (using managed applications)

    • Other realms or environments (user‑to‑user mappings)

  • Prepare for schema changes.

    Before you add, rename, or remove properties on a managed object type, use advanced sync to find all mappings that reference that type. Then update correlation rules, mappings, and scripts as needed.

  • Handle cross‑realm or cross‑system identity flows.

    For example, map users between two realms, or map organizations between Advanced Identity Cloud and an external CRM.

Configure advanced sync

You can access the Advanced Sync editor from either:

  • An application, for app‑centric mappings.

    • Go to apps Applications > application-name > Provisioning > Advanced Sync.

  • An identity object type, for identity‑centric mappings.

    • Go to people Configure > managed-object-type > Advanced Sync.

From the Advanced Sync editor you can: