The process of synchronizing data utilizes the concepts and structures associated with LDAP entries. Ping Identity recommends that you conceptualize the PingOne User Resource model as an LDAP entry when configuring attribute mappings. Additionally, you might need to use JSON pathing when selecting a value for complex JSON attributes within the user. 

dsconfig create-attribute-mapping \
  --map-name PingOne_to_PingDirectory_User_Map \
  --mapping-name givenname \
  --type constructed \
  --set "value-pattern:{name.given}"

Correlating entries

To ensure that users correlate to the appropriate entry in PingDirectory, map the id attribute from the user resource to entryUUID in PingDirectory.