Provisioning options reference

Page created: 7 Oct 2019 |

Page updated: 8 Feb 2022

| 2 min read

Salesforce Other Documents Integrations Language English Integration Content Type Product documentation Audience Administrator

The Salesforce Connector allows you to enable the create, update, and disable capabilities independently, and customize other provisioning options.

Field Name	Description
User Create	Selected (default) – PingFederate creates users in Salesforce. Cleared – PingFederate does not create users in Salesforce.
User Update	Selected (default) – PingFederate updates existing users in Salesforce. Cleared – PingFederate does not update existing users in Salesforce.
User Disable	Selected (default) – PingFederate disables users in Salesforce. Cleared – PingFederate does not disable users in Salesforce.
Freeze Users Instead of Disable	This setting only applies when User Disable is True. Selected – When deprovisioning, PingFederate freezes a user. The frozen user cannot log in, but the user's data, such as profile and activity, is still visible to other users in Salesforce. See Freeze or Unfreeze User Accounts in the Salesforce documentation. Cleared (default) – When deprovisioning, PingFederate disables a user. The user cannot log in, and their data is not visible to other users in Salesforce. Note: PingFederate can only unfreeze users when this is selected. PingFederate can only re-enable users when this is cleared.
Provision Disabled Users	This setting only applies when User Disable is True, and the provisioning connector targets a user in the data store that has a "disabled" status. Selected (default) – PingFederate creates a user in Salesforce with a "disabled" status. Cleared – PingFederate does not create a user in Salesforce.
Note: If any of the above options are cleared, PingFederate logs a warning in the user workflow section of provisioner.log when the related action fails.
Permission Set Management	Merge with permission sets in Salesforce (default) – When a permission set is added in the data store, PingFederate adds it to the user's existing permission sets in Salesforce. PingFederate does not remove any permission sets added in Salesforce by other sources. Overwrite permission sets in Salesforce – When a permission set is added or removed in the data store, PingFederate overwrites the user's permission sets in Salesforce with those from the data store.