Managing populations - PingOne - PingOne Cloud Platform

PingOne
bundle
pingone
ft:publication_title
PingOne
Product_Version_ce
PingOne
PingOne Cloud Platform
category
Administratorguide
ContentType
Guide
Product
Productdocumentation
p1
p1cloudplatform
ContentType_ce
Guide
Product documentation
Guide > Administrator Guide

PingOne allows you to organize users into populations to simplify user and policy management.

Click the appropriate tab for instructions on:

  • Viewing your existing populations and their details
  • Adding a new population
  • Making changes to a population
  • Deleting an unused population

Viewing populations

To view populations in PingOne:

  1. Go to Directory > Populations.
  2. Locate and select the population that you want to view. You can browse or search for populations.

    The population details panel shows the following:

    • The Overview tab:
      • Population name: A label for the population.
      • Description (Optional): A brief characterization of the population.
      • Population ID: A unique identifier for the population.

        Click the Copy icon to copy the population ID to the clipboard.

      • Identity Provider (Optional): The default identity provider (IdP) for the population. When nothing else is selected, PingOne is used as the default IdP during the runtime. Click the title to go to the specific identity provider. If your IdP is not enabled, the word disabled appears next to the title.
    • The Password Policy tab:
      • Password Policy: The password policy assigned to the population. Click the tile to go to the Password policies page.
      • Description: A brief characterization of the password policy.
      • Password Policy ID: The password policy ID. Click the password ID to copy it to the clipboard.
      • Password Requirements: The requirements for the password.
      • Password Policy Rules: The password rules for the policy.
      • Account Lockout Rules: The lockout rules for the account.
    • The Users tab:

      The list of users currently in the population.

    • The Groups tab:

      The list of groups currently in the population.


    Screen capture of the populations default details page.

Adding a population

To add a population to PingOne:

  1. Go to Directory > Populations.
  2. Click the + icon to add a population.
  3. Enter the following:
    • Population Name: A unique label for the population.
    • Description (Optional): A brief characterization of the population.
    • Default Population: Specify the current population as the default population. Users created without a specified population are added to the default population.
      Note:

      If you are changing the default population, PingOne shows a confirmation message. Click Confirm.

  4. Click Save.

Editing a population

To edit an existing population:

  1. Go to Directory > Populations.
  2. Locate the population that you want to edit. You can browse or search for populations.
  3. Click the population entry to open the details panel.
  4. On the Overview tab, click the Pencil icon and edit or enter the following:
    • Population Name: A unique label for the population.
    • Description (Optional): A brief characterization of the population.
    • Identity Provider (Optional): The default IdP for the population.
      Note:

      If you are changing the default IdP, PingOne shows a confirmation message. Validate the IdP configuration to avoid lockout and click Confirm.

      This setting is used at runtime for users in the population who do not have Authoritative Identity Provider configured in their user profile, and only for as long as they remain in the population. When a user doesn't have an IdP configured in their user profile, the default IdP from the population PingOne is used. If Authoritative Identity Provider is set on the user profile, that setting is used to authenticate the user. The user profile setting is not updated or changed by the setting on the population.

      You must have the Identity Data Admin role to configure this setting. See Users for more information.

    • Default population: Specify the current population as the default population. Users created without a specified population are added to the default population.
      Note:

      If you are changing the default population, PingOne shows a confirmation message. Click Confirm.

  5. Optional: On the Password Policy tab, the Standard default policy shows. Click the Pencil icon and select a different password policy that is configured in your environment.
    Learn more in Password Policies.
  6. Optional: On the Users tab, browse or search for a user. Click the More Options (⋮) icon and click Manage User Profile.

    The Users page opens, and the user details panel shows.

    Learn how to change a user's population in Changing a user's population.

    Note:

    Users are added to the default population when a population isn't specified during the new user creation.

  7. Optional: On the Groups tab, browse or search for a group. Click the More Options (⋮) icon and click Manage Group.

    The Groups page opens, and the group details panel shows.

    Learn how to manage groups in Managing groups.

  8. Click Save.

Deleting a population

  • To delete a population, you must have the Environment Admin role.
  • Before you can delete a population, you must remove all identities from it.

To use the Populations page to remove populations that you no longer need:

  1. Go to Directory > Populations.
  2. Locate the population that you want to delete. You can browse or search for populations.
  3. Click the population entry to open the details panel.
  4. Click the three dots options menu, and then click Delete.
  5. Click Delete to confirm.