Use Cases

Setting up your PingOne Dock

The PingOne Dock gives your users one-click, single sign-on (SSO) access to the applications and other service providers (SPs) you authorize them to use.

To get started with the PingOne Dock, you assign user groups, configure dock settings, and personalize branding.

Configuring user access control for PingOne Directory

Before you begin

To set up your PingOne Dock, you must have the following:

About this task

These steps apply only if you are using the PingOne Directory. For all other identity providers, see Configuring user access control for a third-party identity provider.

PingOne uses user groups to control user access to applications. As an administrator, you create user groups, manage the group’s application permissions, and add or remove users to grant or limit their access to those applications.

For users to see application icons in their dock, at least one application must be mapped to a group.

Steps

  1. In PingOne, go to Users → User Directory → Groups.

  2. Click Add Group.

    Result:

    The New Group form opens.

  3. In the Name field, enter a name for this group.

  4. On the Directly Applied Role line, grant user directory access to this group.

    Choose from:

    • To prevent users in this group from viewing or modifying the user directory, click No Access.

    • To allow users in this group to view user and group directory information, click User Reader.

    • To allow users in this group to create and modify user directory information, and to view group directory information, click User Manager.

    • To allow users in this group to create and modify user directory information, create and modify groups, and change group membership, click Group and Entitlement Manager.

  5. Click Save.

    Result:

    The new user group appears in the Groups list.

  6. Go to Users → User Directory → Users.

  7. For each user that you want to add:

    1. Click Edit.

    2. Under Memberships, click Add.

    3. In the Add Group Membership form, select the check box for each group to add the user to.

  8. Go to Applications → My Applications.

  9. For each application you want to grant group access to:

    1. Click the name of the application to expand it.

    2. Click Edit.

    3. Click Continue to Next Step on each tab until you reach the Group Access tab.

    4. To grant group access to this application, click Add.

      Troubleshooting:

      Empty groups do not appear in the Group Access list. If your group does not appear in the list, see step 7 to add users.

  10. Click Continue to Next Step.

  11. Click Finish.

Configuring user access control for a third-party identity provider

Before you begin

To set up your PingOne Dock, you must have the following:

About this task

These steps apply only to third-party identity providers. If you are using PingOne Directory, see Configuring user access control for PingOne Directory.

PingOne user groups control user access to applications. As an administrator, you create user groups, manage the group’s application permissions, and add or remove users to grant or limit their access to those applications.

For users to see application icons in their dock, at least one application must be mapped to a group.

Steps

  1. Go to Users → User Groups.

  2. Click Add New Group.

  3. In the New Group Name field, enter a name for the group.

  4. For each application to allow this group to access, select the corresponding check box.

  5. Click Save.

    Result:

    The subsequent User Groups tab displays only the group you just created.

    To see the list of all your user groups, click the User Groups tab to refresh.

Configuring the PingOne Dock

About this task

You can change the default settings of the PingOne Dock to customize your users experience or comply with your security requirements.

All of the following settings are optional.

Steps

  1. Go to Setup → Dock.

  2. In the Company ID field, enter a company ID.

    The entry in this field becomes part of your PingOne Dock URL, which is displayed in the PingOne Dock URL field.

  3. From the Maximum Session Lifetime list, select the session duration before PingOne signs a user out.

  4. From the Session Idle Timeout list, select the amount of time before PingOne signs off an idle user.

    The default value of - - disables this feature.

  5. Select the Enable Basic SSO box to enable users to vault passwords using the PingOne browser extension.

  6. In the User Support Message field, enter a message that will appear when a user clicks on the Need Help? link on the left navigation pane of the Ping Dock.

  7. For each attribute you want to map, select the attribute to map it to from the list.

    Your IdP automatically maps some attributes, which cannot be changed afterward. The pre-mapped attributes vary depending on your IdP.

    For more information about advanced attribute mapping, see Assign advanced attribute mappings.

  8. Click Save.

Adding your branding to the PingOne Dock

About this task

You can customize the colors, logos, and images of the PingOne Dock to match your organization’s branding.

For reference about each part of the dock, see Introducing the PingOne Dock

Steps

  1. Go to Setup → Branding → Dock.

  2. On the Logo for Dock line, select the image you want to use for the upper left corner of the dock.

    Choose from:

    • To use your existing logo image, click Use Corporate Logo.

      To upload a corporate logo image, go to Account → Branding.

    • To upload a new image, click Custom and then click the Image icon.

  3. In the Main Area section, customize the image and font for the main area of your dock.

    1. Under Background:

      • To apply the default white background, click None.

      • To upload a background image, click Image.

      • To enter or select a solid background color, click Color.

    2. Click the Font Color color picker and enter or select a color for the text in the main area.

    3. Under the Drop Shadow line, click Yes to apply a drop shadow to the text in the main area.

  4. In the Left Navigation Colors section, enter or select the colors for the left navigation pane of your dock.

  5. In the Search Color section, enter or select the colors for the search bar at the top of your dock.

  6. In the Sign Off section, customize the screen users see when they sign off from your dock.

    1. Under Main Background:

      • To apply the default white background, click None.

      • To upload a background image, click Image.

      • To enter or select a solid background color, click Color.

    2. From the Form Color picker, enter or select the color for the sign off page form.

    3. From the Font Color picker, enter or select the color for the text in the sign off page form.

    4. From the Link Color picker, enter or select the color for the link back to the sign on page.

    5. In the Page Text field, enter the text that appears in the sign off page form.

  7. Click Save.

Next steps

To see your changes applied, go to Setup → Dock and click the PingOne Dock URL to sign in as a user.