When you create a UEBA predictor, you can configure it to analyze behavior at the level of the individual user or at the level of the entire organization. You can have up to 15 individual-level UEBA predictors and up to 15 organization-wide UEBA predictors per environment.

  1. In the PingOne console, go to PingOne Risk Management > Predictors.
  2. To add a new predictor, click the + icon.
  3. For the predictor type, select User and Entity Behavior Analytics.
  4. In the Display Name field, enter a name for the predictor.

    The display name is used in the Risk dashboards and policy configuration.

  5. In the Compact Name field, enter a short name that will be returned in the API response.

    You can't change the compact name after it's been saved.

  6. From the Category list, select Individual User to have the analysis performed at the level of the user or Organization-wide to have the analysis performed at the organization level.

    You cannot change the category setting after the predictor has been created.

  7. Use the Fallback Predictor Decision Value list to select the risk level that should be assigned to this predictor if there is insufficient information to calculate the risk level.