Create, update, or delete OAuth and OpenID Connect (OIDC) templates to meet your needs, or revert them to previous versions, if necessary.
To create an OAuth or OIDC template, select a client configuration to replicate. PingCentral retrieves this configuration and saves it as a template, which serves as a building block for future applications.
Update these templates at any time, or revert them to previous versions, as necessary. Applications based on outdated templates have Outdated Template icons associated with them, which inform application owners of changes.
Creating OAuth and OIDC templates
- All templates are listed on the Templates page. To add a new template, click Add Template.
- On the Integration Type page, select either an OAuth or OpenID Connect template. Click Next.
On the Select OAuth Client or OIDC Client
page, select the PingFederate environment that hosts
the client application you want to use as a template, and then select the application
itself from the Client list.
You see details regarding the selected client.
- To see the JSON for the application, click Review Configuration.
On the Name Template page, add a name and description for your
This information will help application owners select the appropriate template.
Select an icon to represent your template.
The icon you choose is shown with the template name and description.
Click Save and Close.
You see the new template in the list of available application templates. Application owners will see the new template on the Select Template page.
For OAuth or OIDC application templates, the following items are saved:
- The client application
- The ATM, if one exists
- The parent ATM, if one exists
- The OIDC policy, if one exists
- Grant types
- Definitions of exclusive scopes referenced by the client
Updating OAuth and OIDC templates
To update an OAuth or OIDC template, click the Expand
icon associated with the template and click the Pencil
All of the editable information is on one page.
Option Description To update the name, description, or icon: Update the information in the Name and Description fields or select a new icon to represent the template. To update grant types: To update the grant types used for authorization, select or deselect the grant types that you want to use for this template.
For details, see Grant Types in the PingFederate Server guide.Note:
Some grant types might not be available with your version of PingFederate.
To update scopes: To add or update scopes, search for them and select or deselect the scopes that you want to use for this template.
For details, see Scopes in the PingFederate Server guide.
To update policy contracts: Add, delete, or update the current attribute mappings in the PingFederate policy contract associated with this template.
For details, see Attribute contracts in the PingFederate Server guide.Important:
If you update a policy contract, a new contract is created in PingFederate, and you will be prompted to name it.Note: If a template is associated with an environment that is deleted, you will not be able to update OIDC policy information for the template.
All applications based on the previous template version display an Outdated Template icon next to their names.
If you updated the grant types, scopes, or policy contract information, the Save Template window displays and reminds you that you are creating a new version of this template. Applications created from the previous template will not change until you update the application to the latest template version. Briefly describe the updates you made to the template in the Comments field for tracking purposes and click Save.
Reverting templates to previous versions
The history of each OAuth and OIDC template is available to review and compare with previous versions. You can see which administrator modified the template configuration or policy contract, when it was modified, and details regarding these modifications. You can revert templates to previous versions if necessary.
- To review the template history, click the Expand icon associated with the template, and then click the History tab.
- Click the Details link associated with each template version to see its configuration.
Click the Diff with Current Version toggle to see the
differences between this version and the most recent version.
To restore this version as the current version, click Restore This
A new version of the template is created that matches the configuration of the version that you want to restore. All applications based on the previous version of this template display an Outdated Template icon next to their names.