Configuring user access control for PingOne Directory - PingOne Cloud Platform - PingOne

Use Cases

bundle
solution-guides
ft:publication_title
Use Cases
Product_Version_ce
category
ContentType
howtodoc
ContentType_ce
How-to

To set up your PingOne Dock, you must have the following:

Note:

These steps apply only if you are using the PingOne Directory. For all other identity providers, see Configuring user access control for a third-party identity provider.

PingOne uses user groups to control user access to applications. As an administrator, you create user groups, manage the group's application permissions, and add or remove users to grant or limit their access to those applications.

For users to see application icons in their dock, at least one application must be mapped to a group.

  1. In PingOne, go to Users > User Directory > Groups.
  2. Click Add Group.
    The New Group form opens.
  3. In the Name field, enter a name for this group.
  4. On the Directly Applied Role line, grant user directory access to this group.
    • To prevent users in this group from viewing or modifying the user directory, click No Access.
    • To allow users in this group to view user and group directory information, click User Reader.
    • To allow users in this group to create and modify user directory information, and to view group directory information, click User Manager.
    • To allow users in this group to create and modify user directory information, create and modify groups, and change group membership, click Group and Entitlement Manager.
  5. Click Save.
    The new user group appears in the Groups list.
  6. Go to Users > User Directory > Users.
  7. For each user that you want to add:
    1. Click Edit.
    2. Under Memberships, click Add.
    3. In the Add Group Membership form, select the check box for each group to add the user to.
  8. Go to Applications > My Applications.
  9. For each application you want to grant group access to:
    1. Click the name of the application to expand it.
    2. Click Edit.
    3. Click Continue to Next Step on each tab until you reach the Group Access tab.
    4. To grant group access to this application, click Add.
    Empty groups do not appear in the Group Access list. If your group does not appear in the list, see step 7 to add users.
  10. Click Continue to Next Step.
  11. Click Finish.