PingOne Advanced Identity Cloud

Hosted account pages

Hosted account pages are pre-built, customizable web pages that provide end users with self-service capabilities for managing their accounts after they’ve signed on. They’re a key part of the end-user experience and are designed to help you quickly set up common end-user self-service operations without needing to build your own custom web pages from scratch.

Hosted account profile page example with full menu
Hosted account pages example page with full menu

Summary of features

These pages allow authenticated end users to perform essential account management tasks. The specific features available depend on your Advanced Identity Cloud configuration, but commonly include:

  • Profile management: End users can view and update their personal information (for example, name, email address, address) if they’re configured to be editable.

  • Security management:

    • Password updates: Allowing end users to change their password.

    • Multi-factor authentication (MFA): Managing registered devices or two-step verification settings.

    • Security questions: Viewing or resetting their security questions.

  • Access and entitlement viewing: End users can see details about their access within integrated applications, which often includes:

    • My applications: Viewing and navigating to applications they have access to.

    • Roles and entitlements: Seeing the roles and specific privileges (entitlements) they have been assigned in onboarded target applications.

    • Account controls: Allowing end users to download or delete their own account data (if enabled).

  • Identity governance: With Identity Governance[1], end users can also:

    • Manage delegates: Assign individuals to handle their access reviews or other delegated items.

    • View direct reports: Managers can access the accounts, entitlements, and roles of their direct reports.

    • Manage requests: Create or view requests they have submitted for gaining access to an application, entitlement, or role.

Account pages menu

The hosted account pages include a navigation menu that provides easy access to the various self-service features.

The items displayed in the menu depend on a number of factors:

  • Availability and visibility: Menu items display based on their availability and visibility as follows:

    • Available as standard, visible by default to all end users.

    • Available as standard, visible based on the delegated administrator privileges of the end user.

    • Available and visible to all end users as part of an add-on capability, such as IGA[1].

  • Configuration: You can override the visibility of menu items through configuration settings to suit your company’s needs. This lets you hide certain menu items that are not relevant to your end users. For example, hiding the organization menu item from organization administrators whose regular job only requires managing users within the organization, but not the organization itself. Learn more in Change menu item visibility.

You can also change the order and grouping of menu items in the navigation menu, add custom menu items, and modify their icons to align with your branding.

The following table summarizes the behavior of the menu items that are available as standard in the hosted account pages:

Menu item Visibility Description

dashboard Dashboard

Displays tasks and information that require the end user’s attention.

apps Applications

Lets the end user view and access their applications. Displays SAML-based applications and Bookmark applications, but not OAuth 2.0 applications.

person Profile

Lets the end user view and edit their account profile, including personal information.

The actions available on this page vary depending on the configurations set in Configure actions and information for end users.

summarize Reports

Lets the end user view any reports shared with them by a tenant administrator.

vpn_key Alpha realm - Assignment
 or
vpn_key Bravo realm - Assignment

  • Visible based on delegated administrator privileges. Requires the end user to be assigned to an internal role that has at least the view privilege for the role identity type. Learn more in Enable delegated administrator menu items.

  • Organization and user menu items also visible based on organization privileges (being an organization administrator, owner, or member).

  • Can be individually hidden via configuration. Learn more in Change menu item visibility.

Lets the end user access the management interface for the identity type.

group Alpha realm - Group
 or
group Bravo realm - Group

domain Alpha realm - Organization
 or
domain Bravo realm - Organization

assignment_ind Alpha realm - Role
 or
assignment_ind Bravo realm - Role

people Alpha realm - User
 or
people Bravo realm - User

people Internal Role

The following table summarizes the behavior of the menu items that are available with add-on capabilities in the hosted account pages:

Menu item Visibility Description

inbox My Inbox

Submenu items:

  • Approvals

  • Tasks

  • Access Reviews

  • Violations

  • Visible by default with IGA[1].

  • Menu items and submenu items can be individually hidden via configuration. Learn more in Change menu item visibility.

Displays all items assigned to an end user.

This includes:

  • Any approval items (submitted access requests) for an approver (designated owner) to act on.

  • Any tasks assigned to the end user.

  • Any access reviews assigned to a certifier (individual assigned to review the access).

  • Any policy violations that require the end user’s attention.

lock My Access

Submenu items:

  • My Accounts

  • My Roles

  • My Entitlements

Lets the end user view the access they have in Advanced Identity Cloud and via applications.

This includes:

  • Accounts from onboarded target applications.

  • Roles they’re assigned in Advanced Identity Cloud.

  • Entitlements or privileges they have in onboarded target applications.

Learn more in Request access to resources.

folder My Directory

Submenu items:

  • My Delegates

  • Direct Reports

Lets the end user manage the delegates and direct reports (employees) they have.

End users can perform the following actions:

  • Manage their delegates. Delegates are individuals that are assigned to their access reviews.

  • Access their direct reports and the access granted to them.

send My Requests

Lets the end user view and create requests to access resources, such as target applications, entitlements, or roles.

Learn more in Request access to resources.

Customize the account pages menu

Enable delegated administrator menu items

By default, the menu items related to delegated administrator privileges (for example, Alpha realm - User) aren’t visible to end users. These menu items become visible only when an end user is assigned to an internal role that has at least the view privilege for the corresponding identity type.

The following steps describe how to create an internal role with the necessary privileges to manage an identity type and assign it to an end user.

  1. In the Advanced Identity Cloud admin console, go to Identities > Manage.

  2. Click Internal Roles.

  3. Click add New Internal Role.

  4. In the New Internal Role modal:

    1. Enter a name for the internal role. For example, Delegated Administrator.

    2. (Optional) Enter a description for the internal role.

    3. Click Next.

  5. In the Internal role Permissions modal:

    1. In the Choose an identity object list, select an identity type. For example, Alpha realm - Users.

    2. Click add Add.

    3. Select at least the View privilege and any additional privileges for the identity type using the Create, Update, and Delete options.

      Internal role Permissions modal

    4. (Optional) Repeat the previous three steps to add additional identity types and their corresponding privileges as necessary.

    5. Click Next.

  6. In the Dynamic Internal role Assignment modal, click Next.

  7. In the Time Constraint modal, click Save to create the internal role.

  8. In the Internal Role page, click the Members tab, then click add Add Members.

  9. In the Add Members modal, select a user identity from the Members list that you want to assign the internal role to, then click Save.

The end user can now see the corresponding delegated administrator menu items in the hosted account pages navigation menu when they sign on.

For more complex delegated administration use cases, learn more in:

Change the visibility of a menu item

Change the visibility of menu items to streamline the end-user experience.

  1. In the Advanced Identity Cloud admin console, go to Hosted Pages, then select a theme.

  2. Select Account Pages.

  3. In the panel on the right-hand side, click Layout, then scroll to the Navigation section.

  4. To hide a menu item:

    1. Find the menu item you want to hide, and click its ellipsis icon (more_horiz).

    2. Click delete Delete. This removes the menu item from the navigation menu, although it remains available for re-adding later.

    3. Click Save.

  5. To show a previously hidden menu item:

    1. Click the add icon (add).

    2. From the list of available menu items, select the menu item you want to show, then click Next.

    3. Configure the menu item:

      1. (Optional) Change the Label.

      2. (Optional) Change the Icon Code. For a list of available icon codes, refer to Material Icons.

      3. (Optional) If the menu item has submenu items, select which submenu items to include using the checkboxes under Dropdown Items. By default, all submenu items are selected.

    4. Click Add.

    5. (Optional) Click the menu item’s drag indicator icon (drag_indicator) and drag the menu item to the desired position in the menu.

    6. Click Save.

Change menu item order and grouping

Change the order and grouping of menu items in the navigation menu to suit your company’s needs.

  1. In the Advanced Identity Cloud admin console, go to Hosted Pages, then select a theme.

  2. Select Account Pages.

  3. In the panel on the right-hand side, click Layout, then scroll to the Navigation section.

  4. To reorder menu items:

    1. Click a menu item’s drag indicator icon (drag_indicator) and drag it to the desired position in the menu.

    2. Repeat for any other menu items you want to reorder.

  5. To group menu items:

    1. (Optional) Add additional divider menu items to the menu:

      1. Click the add icon (add).

      2. From the list of available menu items, select Divider, then click Next.

      3. Repeat as necessary to add multiple divider menu items.

    2. (Optional) Remove existing divider menu items that you don’t need:

      1. Find the divider menu item you want to remove, and click its ellipsis icon (more_horiz).

      2. Click delete Delete.

    3. Click the drag indicator icon (drag_indicator) of a Divider menu item and drag it to the desired position in the menu to create a visual separation between groups of menu items. Repeat for any other Divider menu items you want to reposition.

    4. Click Save.

Change menu item label and icon

Change the label or icon for your menu items to better align with your company’s branding.

  1. In the Advanced Identity Cloud admin console, go to Hosted Pages, then select a theme.

  2. Select Account Pages.

  3. In the panel on the right-hand side, click Layout, then scroll to the Navigation section.

  4. Find the menu item you want to change, and click its ellipsis icon (more_horiz).

  5. Configure the menu item:

    1. (Optional) Change the Label.

    2. (Optional) Change the Icon Code. For a list of available icon codes, refer to Material Icons.

    3. (Optional) If the menu item has submenu items, select which submenu items to include using the checkboxes under Dropdown Items. By default, all submenu items are selected.

  6. Click Save.

Add custom menu items

Add a custom menu item to link to other Ping Identity resources such as the PingOne Dock, PingOne self service, or a specific journey or flow. You can also link to resources in your company that end users may need to access.

  1. In the Advanced Identity Cloud admin console, go to Hosted Pages, then select a theme.

  2. Select Account Pages.

  3. In the panel on the right-hand side, click Layout, then scroll to the Navigation section.

  4. Click the add icon (add).

  5. From the list of available menu items, select Custom Link, then click Next.

  6. Configure the menu item:

    1. Enter a menu Label.

    2. (Optional) Change the Icon Code. For a list of available icon codes, refer to Material Icons. Otherwise, the default link icon (link) is used.

    3. Enter an absolute URL for the custom menu item. The URL opens in a new browser tab when the end user clicks the menu item.

    4. Click Add.

  7. (Optional) Click the menu item’s drag indicator icon (drag_indicator) and drag the menu item to the desired position in the menu.

  8. Click Save.

1. IGA is an add-on capability.