PingOne Advanced Identity Cloud

Manage just-in-time access

With JIT access, you request access only for the time you need it. When you submit a request, you see when your access starts and ends, so you always know how long it lasts. From the My Access page, you can review the start and end dates on your grants and request an extension if you still need the same access. As your end date approaches, Identity Governance sends reminder notifications based on your organization’s settings, and after someone approves your extension request (if required), Identity Governance updates your grant so that you keep access only as long as you need it.

View my JIT access start and end dates

Use this procedure to confirm how long your current access lasts:

  1. In the Advanced Identity Cloud end-user UI, click My Access.

  2. Depending on what you need to review, select one of the following:

    • My Accounts.

    • My Roles.

    • My Entitlements.

  3. Review the details and find the Start date and End date fields to see when your access begins and when it expires.

Specify a start and end date for a request

  1. In the Advanced Identity Cloud end-user UI, click My Requests, and then add New Request.

  2. In the New Request modal, select add access for yourself or someone else. If you select Other Users, select the user from the list. You can select a maximum of 10 users in a single request.

  3. Click Next.

  4. On the Access Catalog page, select the access you need: Applications, Entitlements, or Roles.

  5. For this example, select Entitlements and select the entitlements you need.

  6. Review the entitlement, and then click Add to Request.

  7. In the right pane, enter the following:

    • Justification: A reason for needing the access.

    • Priority: Select the priority of your request: Low, Medium, or High.

    • Access Start date: When you need the access to begin.

    • Access End date: When you need the access to end.

    • Apply Expiration Date (optional): Click to have the system automatically remove the access on the end date.

      If you don’t select this option, the governance or role administrator must manually remove the access when you no longer need it.

  8. Click Complete Request. Your request appears on the My Requests page.

    The new request page showing the start and end date fields.

Extend end date for access

  1. In the Advanced Identity Cloud end-user UI, click My Accounts, My Roles, or My Entitlements.

  2. Select the access you want to extend by clicking the ellipsis (more_horiz).

  3. Select Extend End Date.

  4. In the Request Extension modal, enter the following:

    • Date: Enter the new end date extension.

    • Time: Enter the time for the new end date extension.

    • Justification: Enter a reason for the extension.

    • Priority: Change the priority of your request if needed: Low, Medium, or High.

  5. Click Submit Request. Your request appears on the My Requests page, where the owner must approve the extension request to update the end date.

    The extend end date option for an end user’s access.