--- title: Tenant settings description: Administrators can configure tenant-wide settings from the admin console. component: privilege page_id: privilege:human-privilege:getting-started-admin/tenant-settings canonical_url: https://docs.pingidentity.com/privilege/human-privilege/getting-started-admin/tenant-settings.html llms_txt: https://docs.pingidentity.com/privilege/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md revdate: February 16, 2026 page_aliases: ["human-privilege:admin-tasks/getting-started/tenant-settings.adoc"] section_ids: profile: Profile tenant-information: Tenant Information mdm-onboarding: MDM Onboarding for-developers: For Developers --- # Tenant settings Administrators can configure tenant-wide settings from the admin console. To access these settings, select your user profile from the upper-right corner of the navigation bar, then click **Settings**. ## Profile The following settings are available in the **Profile** tab: ### Tenant Information | Setting | Description | | --------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | **Tenant** | Displays the name assigned to the tenant during the sign-up process. This name is read-only. | | **Session Logging** | Enable to record all SSH and database sessions. Review session logs on the **Activity > Session Logs** page. | | **RDP Recording** | When enabled, all RDP sessions are recorded and can be reviewed in the session logs. | | **SSH PAM** | Enable the Pluggable Authentication Module (PAM) for SSH to integrate with existing authentication systems. | | **MFA** | Enforce multi-factor authentication (MFA) *(tooltip: \
\

An electronic authentication method where a user is granted access only after presenting two or more verification factors for authentication.\

\
)* for all users accessing the PingOne Privilege platform. To challenge users with PingID MFA when they connect the PingOne Privilege app, see [Requiring PingID MFA for PingOne Privilege app connections](../configuration/multi-factor-authentication/pingid-mfa-app-connect.html). | | **Private Proxy Only Mode** | When enabled, this option forces all user connections through your tenant's private gateways, preventing any connection to the PingOne Privilege public proxy infrastructure. | | **Agentless** | Enable this setting for No Endpoint Controller-based deployment models, where users connect without a locally installed agent. | | **Restrict Admin Approval** | When enabled, administrators can't approve their own access requests. | | **Role Name Prefix** | Define a prefix for all roles created by PingOne Privilege in your cloud provider's IAM. This helps to identify and manage roles created by the platform. | | **Cert Rotation Interval** | Set the interval at which PingOne Privilege rotates its internal certificates. | ### MDM Onboarding | Setting | Description | | -------------- | --------------------------------------------------------------------------------------------------------- | | **Public Key** | Displays the public key for Mobile Device Management (MDM) onboarding, used to enroll and verify devices. | ### For Developers | Setting | Description | | -------------- | ------------------------------------------------------------------------------------------------------------------------------ | | **API Key** | Displays the API key for your tenant. Use this key, along with the API Secret, to authenticate with the PingOne Privilege API. | | **API Secret** | Displays the API secret for your tenant. Click to reveal or copy the secret. | | **Expires** | Displays the expiration date for the current API Key and Secret. | | **Endpoint** | Displays the base API endpoint for your PingOne Privilege tenant. |