1. Sign on to the local PingAccess system and start a non-Internet Explorer (IE) browser.
  2. Sign on to the API doc page at https://<host>:<admin-port>/pa-admin-api/v3/api-docs/.
    https://localhost:9000/pa-admin-api/v3/api-docs/

    Use the normal administrator username, Administrator, and your password.

  3. Expand /applications, then:
    • To add a risk policy to a specific application, expand PUT/applications/<id>.
    • To add a risk policy to a specific application resource, expand PUT/applications/<applicationId>/resources/<resourceId>.
    Note:

    PingOne risk policies depend on mapping user identity attributes to the risk evaluation requests, so the PingAccess admin API will prevent you from saving an unprotected application or resource with a risk policy.

  4. Paste the <riskPolicyId> of the risk policy that you want to apply into the Application or Resource field, as appropriate:
    • To apply a policy to an application, update the Application field using the ApplicationView operation model in the API docs.
    • To apply a policy to an application resource, update the Resource field using the ResourceView operation model in the API docs.
    Note:

    A risk policy applied at the resource level takes precedence over one applied at the application level.

  5. To save your changes, click Try it out!.

    You have assigned a risk policy to a specific application or application resource in your PingAccess environment.