Create a rule to define which users are provisioned and how attributes are mapped between PingOne and the LDAP directory.
- The RDN attribute that specifies the relative portion of the DN (distinguished name), which uniquely identifies the user in the LDAP directory.
- The Base DN that specifies where the users will be created in the LDAP directory.
- Go to .
- Click + and then click New rule.
- Enter a name and description for the rule. The rule name will appear in the list when you've completed and saved the rule.
- Click Create rule.
Click the Target button, and then click the
+ icon for the appropriate gateway to add it as the
target connection. PingOne
Directory will be automatically added as the source.
If you haven’t created the appropriate connection yet, see Creating an LDAP gateway provisioning connection. You can add disabled connections to a source or target, but the connection must be enabled to enable an associated rule.
Enter the following:
RDN attribute. Select the PingOne attribute that will map to the RDN attribute. The RDN attribute is the relative portion of the DN (distinguished name) that uniquely identifies the user in the LDAP directoryNote:The default attributes are based on the directory type of the gateway used.
For Active Directory,
For Ping Directory,
Base DN. Specifies the location in the LDAP directory structure where users will be created. For more information, see Distinguished Names in the Microsoft LDAP documentation.
- Click Save.