Tenant settings

Administrators can configure tenant-wide settings from the admin console. To access these settings, select your user profile from the upper-right corner of the navigation bar, then click Settings.

Profile

The following settings are available in the Profile tab:

Tenant Information

Setting	Description
Tenant	Displays the name assigned to the tenant during the sign-up process. This name is read-only.
Session Logging	Enable to record all SSH and database sessions. Review session logs on the Activity > Session Logs page.
RDP Recording	When enabled, all RDP sessions are recorded and can be reviewed in the session logs.
SSH PAM	Enable the Pluggable Authentication Module (PAM) for SSH to integrate with existing authentication systems.
MFA	Enforce multi-factor authentication (MFA) for all users accessing the PingOne Privilege platform. To challenge users with PingID MFA when they connect the PingOne Privilege app, see Requiring PingID MFA for PingOne Privilege app connections.
Private Proxy Only Mode	When enabled, this option forces all user connections through your tenant’s private gateways, preventing any connection to the PingOne Privilege public proxy infrastructure.
Agentless	Enable this setting for No Endpoint Controller-based deployment models, where users connect without a locally installed agent.
Restrict Admin Approval	When enabled, administrators can’t approve their own access requests.
Role Name Prefix	Define a prefix for all roles created by PingOne Privilege in your cloud provider’s IAM. This helps to identify and manage roles created by the platform.
Cert Rotation Interval	Set the interval at which PingOne Privilege rotates its internal certificates.

Setting

Description

Tenant

Displays the name assigned to the tenant during the sign-up process. This name is read-only.

Session Logging

Enable to record all SSH and database sessions. Review session logs on the Activity > Session Logs page.

RDP Recording

When enabled, all RDP sessions are recorded and can be reviewed in the session logs.

SSH PAM

Enable the Pluggable Authentication Module (PAM) for SSH to integrate with existing authentication systems.

MFA

Enforce multi-factor authentication (MFA) for all users accessing the PingOne Privilege platform. To challenge users with PingID MFA when they connect the PingOne Privilege app, see Requiring PingID MFA for PingOne Privilege app connections.

Private Proxy Only Mode

When enabled, this option forces all user connections through your tenant’s private gateways, preventing any connection to the PingOne Privilege public proxy infrastructure.

Agentless

Enable this setting for No Endpoint Controller-based deployment models, where users connect without a locally installed agent.

Restrict Admin Approval

When enabled, administrators can’t approve their own access requests.

Role Name Prefix

Define a prefix for all roles created by PingOne Privilege in your cloud provider’s IAM. This helps to identify and manage roles created by the platform.

Cert Rotation Interval

Set the interval at which PingOne Privilege rotates its internal certificates.

MDM Onboarding

Setting	Description
Public Key	Displays the public key for Mobile Device Management (MDM) onboarding, used to enroll and verify devices.

Setting

Description

Public Key

Displays the public key for Mobile Device Management (MDM) onboarding, used to enroll and verify devices.

For Developers

Setting	Description
API Key	Displays the API key for your tenant. Use this key, along with the API Secret, to authenticate with the PingOne Privilege API.
API Secret	Displays the API secret for your tenant. Click to reveal or copy the secret.
Expires	Displays the expiration date for the current API Key and Secret.
Endpoint	Displays the base API endpoint for your PingOne Privilege tenant.

Setting

Description

API Key

Displays the API key for your tenant. Use this key, along with the API Secret, to authenticate with the PingOne Privilege API.

API Secret

Displays the API secret for your tenant. Click to reveal or copy the secret.

Expires

Displays the expiration date for the current API Key and Secret.

Endpoint

Displays the base API endpoint for your PingOne Privilege tenant.