You can use these components individually or together.

Data store and password credential validator
  • The datastore allows PingFederate to retrieve user attributes from PingOne.
  • The password credential validator allows PingFederate to validate user credentials against the PingOne data store during sign on.
Provisioning connector
  • Allows the PingFederate provisioning engine to manage users and groups in PingOne.
  • Allows PingFederate to manage users' SMS, email, and voice devices for PingOne MFA.
  • Allows PingFederate to create custom attributes.

The user guide also provides instructions for creating an OpenID Connect integration with PingOne.

Intended audience

This document is intended for PingFederate administrators.

If you need help during the setup process, see the following resources:

System requirements

  • PingFederate 10.3 or later
  • To allow PingFederate to make outbound HTTPS connections, you might need to allow the following hostnames in your firewall:
    •,, or
    •,, or