On the Provisioning tab, you enable provisioning of users and groups from your directory server to PingOne for Enterprise by specifying the group where PingFederate should look for member users.

  1. Select the Configure Provisioning check box.
  2. In the Group DN field, enter the distinguished name (DN) of the applicable group.

    The specified group must reside under the hierarchy of the previously-defined Search Base value. See .

  3. Optional: For PingFederate to provision users through nested group membership, select the Nested check box.
  4. Click Next.