When defining an OpenID Connect (OIDC)-based application, you can specify the resources that the application can request access to by adding the relevant scopes to the application. When an application requests an access token from PingOne so that it can access a custom resource, the application sends the required scopes in the request. The lifetime of the access token is determined by the access token lifetime set in that custom resource.

  1. Go to Applications > Resources.
  2. Click the + icon.
  3. For Create resource profile, enter the following information:
    • Resource name. A unique identifier for the resource.
    • Audience. (Optional) The intended audience for the resource. If you don’t provide a value, PingOne will default to the resource name.
    • Description. (Optional) A brief characterization of the resource.
    • Access token time to live. The maximum time that the access token will be valid for use in the application, in seconds.
  4. Click Next.
  5. For Attributes, map resource attributes to user attributes in PingOne.
    1. Enter a resource attribute and then select the corresponding PingOne attribute from the list.
    2. To add an attribute, click the + Add button.
  6. Click Next.
  7. For Scopes, configure the appropriate scopes for the resource. Each resource can have one or more scopes. To add a scope, click + Add scope. Enter the following:
    • Scope name. The name of the scope to be used for this resource. Scopes are defined by the resource server.
    • Description. (Optional) A brief characterization of the scope.
  8. Click Save.
  9. To add the scope to an application, go to Applications > Applications, and browse or search for the appropriate application.
  10. On the Resources tab, click the Pencil icon.
  11. Locate the scope that you previously added to your resource and click the checkbox next to the scope.
  12. Click Save.