Upgrading to PingFederate 9.0 or 9.0.1 when using its outbound provisioning capability can result in user records being disabled at SaaS applications. The issue has since been resolved in version 9.0.2.

If you are upgrading from version 8.4.4 (or an earlier version) or 9.0.2 to version 10.1, the upgrade process automatically resolves this issue. No further action is required.

If you are upgrading from version 9.0 or 9.0.1 to version 10.1, use the following provmgr commands to reset the provisioning datastore on the upgraded installation:

The provmgr command-line tool, used in the following steps, is located in the <pf_install>/pingfederate/bin directory: provmgr.bat for Windows and provmgr.sh for Linux. For more information about the provmgr command-line tool, see Outbound provisioning CLI.

  1. Run the following command to obtain a list of provisioning channel IDs. 
    provmgr --show-channels
  2. Reset the provisioning datastore for a given channel by its ID. 
    provmgr -c <channel_id> --reset-all
    Note:

    If you have multiple provisioning channels, run the command for each channel. The order of the parameters does not matter.