The application portal itself is an OIDC-based application. Like other OIDC-based applications, you can configure an authentication policy for the application portal.
The authentication policy defines the sign-on requirements for accessing the application.
- Default domain
- By default, the application portal Home Page URL is https://apps.pingone.<region>/<envId>/myapps/
- Custom domain
- If you use a custom domain, the Home Page URL is https://<customDomain>/myapps/
For more information about how authentication policies are evaluated, see Authentication policies for applications.
To apply authentication polices to the application portal:
- Go to and click the PingOne Application Portal application to open the details panel.
- Click the Policies tab, and then click the Pencil icon.
- Select the policy that you want to apply.
- Click Save.
PingOne applies the selected policies to the PingOne Application Portal application. For more information about how authentication policies are evaluated, see Authentication policies for applications.
To control which authentication policy is used when users access the portal, append the policy HTTP request parameter to the end of the URL for the application when you share the URL with users.
For example, the application portal is configured with three authentication policies named One, Two, and Three, and the policies are listed in that order on the Policies tab. You want a certain group of users to use policy Two when accessing the portal. Before you share the URL for the portal with these users, append the policy parameter to the URL as follows:
- If you are using the default domain
- https://apps.pingone.<region>/<envId>/myapps/?policy=Two
- If you are using a custom domain
- https://<customDomain>/myapps/?policy=Two
To use a DaVinci flow policy instead of an authentication policy, use the policy ID for the policy parameter value.
If the policy name or ID does not match any configured policy, then PingOne returns an error.