PingOne Privilege

Onboarding users

How admins onboard users to PingOne Privilege depends on the deployment model your organization uses. The process involves sending a link to users so they can access the user console.

Before you onboard a user, the user must belong to a group that has access to the PingOne Privilege application in PingOne. Learn more in Setting up your environment in PingOne.

Onboarding users in Endpoint Controller-based deployments

For Endpoint Controller-based deployment models, users must first install the Endpoint Controller. You can onboard users by sending them the Endpoint Controller download link:

  1. In the PingOne admin console, open the navigation menu in the upper-right corner. Select Settings.

  2. Click the App Downloads tab.

    A screenshot showing the App Downloads tab with the Desktop Applications section visible.

  3. On the Privilege App tile, select the appropriate operating system for the user.

  4. Copy the download link.

  5. Send the download link to the user, along with the user’s onboarding link.

The user installs the Endpoint Controller, then opens the onboarding link to register their device and access the user console. You generate onboarding links in the PingOne admin console. Learn more in Accessing the PingOne Privilege admin console as an administrator.

To install the Endpoint Controller on many devices at once, distribute it with your Mobile Device Management (MDM) platform, such as Jamf Pro or Intune. Learn more in Deploying the Endpoint Controller with an MDM platform.

Deploying the Endpoint Controller with an MDM platform

Sending download links works for small teams, but doesn’t scale to organization-wide rollouts. If you manage many devices, deploy the Endpoint Controller with your organization’s Mobile Device Management (MDM) platform instead. MDM deployment applies to Endpoint Controller-based deployments only.

Follow the steps for your platform:

You’ll configure the operating-system permissions, install the Endpoint Controller, and apply the PingOne Privilege onboarding configuration. After deployment, users complete the required registration steps by opening their onboarding link.

MDM deployment doesn’t replace PingOne group access. Before you deploy, confirm that your users belong to a group with access to the PingOne Privilege application. Learn more in Setting up your environment in PingOne.

Onboarding users in No Endpoint Controller-based deployments

For No Endpoint Controller-based deployment models, users install the No Endpoint Controller, then open the onboarding link to access the user console. You generate onboarding links in the PingOne admin console. Learn more in Accessing the PingOne Privilege admin console as an administrator.

  1. In the PingOne admin console, open the navigation menu in the upper-right corner. Select Settings.

  2. Click the App Downloads tab.

    A screenshot showing the App Downloads tab with the Agentless CLI section visible.

  3. On the Agentless CLI tile, select the appropriate operating system for the user.

  4. Copy the download link.

  5. Send the download link to the user, along with the user’s onboarding link.