PingOne Privilege

Getting started with Agent Privilege

Set up and use Agent Privilege to secure AI agent traffic in your organization.

Before you begin

Ensure the following:

  • You have a PingOne tenant with the Agent Privilege and PingOne SSO services added.

  • Your PingOne environment is configured for user and group access to PingOne Privilege.

  • You can access the PingOne Privilege admin console as an administrator.

  • You have identified which agents your users are running (for example, Claude Code, Cursor, or OpenAI Codex) and which enterprise resources those agents need to access.

Configure Agent Privilege

Configure Agent Privilege in the PingOne Privilege admin console in the following order:

  1. Configure Agent Privilege: Set up AI gateways for runtime protection on all agentic apps.

  2. Add agents in Agent Registry: Register the agents that will authenticate to PingOne Privilege and choose how they authenticate.

  3. Set up multi-factor authentication: Require PingID MFA for app connections and step-up authentication for privileged commands.