If you have chosen to connect PingFederate to a directory server, the Provisioning screen becomes available. On the Provisioning screen, you can optionally enable provisioning of users and groups from your directory server to PingOne® for Enterprise. In this configuration, you specify the group where PingFederate should look for member users and provision them to PingOne for Enterprise.

  1. Select the Configure Provisioning check box.
  2. Enter the distinguished name (DN) of the applicable group in the Group DN field.

    The specified group must resides under the hierarchy of the previously defined Search Base value (see Connecting to a directory server).

  3. If you want PingFederate to provision users through nested group membership, select the Nested check box

    This check box is not selected by default.

  4. Click Next.