--- title: Setting up your PingOne Dock description: The PingOne Dock gives your users one-click, single sign-on (SSO) access to the applications and other service providers (SPs) you authorize them to use. component: solution-guides page_id: solution-guides:workforce_use_cases:htg_p1_dock_setup canonical_url: https://docs.pingidentity.com/solution-guides/workforce_use_cases/htg_p1_dock_setup.html revdate: April 14, 2025 page_aliases: ["workforce_use_cases:htg_p1_dock_setup_access_directory.adoc", "workforce_use_cases:htg_p1_dock_setup_config_third_party_ip.adoc", "workforce_use_cases:htg_p1_dock_setup_config_dock.adoc", "workforce_use_cases:htg_p1_dock_setup_branding.adoc"] section_ids: configure-user-ac-pingone-dir: Configuring user access control for PingOne Directory before-you-begin: Before you begin about-this-task: About this task steps: Steps result: Result: choose-from: Choose from: result-2: Result: troubleshooting: Troubleshooting: configure-user-ac-third-party-ip: Configuring user access control for a third-party identity provider before-you-begin-2: Before you begin about-this-task-2: About this task steps-2: Steps result-3: Result: configuring-the-pingone-dock: Configuring the PingOne Dock about-this-task-3: About this task steps-3: Steps adding-your-branding-to-the-pingone-dock: Adding your branding to the PingOne Dock about-this-task-4: About this task steps-4: Steps choose-from-2: Choose from: next-steps: Next steps --- # Setting up your PingOne Dock The PingOne Dock gives your users one-click, single sign-on (SSO) access to the applications and other service providers (SPs) you authorize them to use. To get started with the PingOne Dock, you assign user groups, configure dock settings, and personalize branding. ## Configuring user access control for PingOne Directory ### Before you begin To set up your PingOne Dock, you must have the following: * A PingOne account If you don't have a PingOne account, register at . * A connection between PingOne and an identity provider (IdP) Learn more about IdPs and connecting to them in [Connecting to an identity repository](https://docs.pingidentity.com/pingoneforenterprise/pingone_for_enterprise/p14e_connecting_idp.html). ### About this task | | | | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | | These steps only apply if you are using the PingOne Directory. For all other identity providers, learn more in [Configuring user access control for a third-party identity provider](#configure-user-ac-third-party-ip). | PingOne uses user groups to control user access to applications. As an administrator, you create user groups, manage the group's application permissions, and add or remove users to grant or limit their access to those applications. To display application icons in a user's dock, map at least one application to a group. ### Steps 1. In PingOne, go to **Users > User Directory > Groups**. 2. Click **Add Group**. #### Result: The **New Group** form opens. 3. In the **Name** field, enter a name for this group. 4. On the **Directly Applied Role** line, grant user directory access to this group. #### Choose from: * To prevent users in this group from viewing or modifying the user directory, click **No Access**. * To allow users in this group to view user and group directory information, click **User Reader**. * To allow users in this group to create and modify user directory information, and to view group directory information, click **User Manager**. * To allow users in this group to create and modify user directory information, create and modify groups, and change group membership, click **Group and Entitlement Manager**. 5. Click **Save**. #### Result: The new user group appears in the **Groups** list. 6. Go to **Users > User Directory > Users**. 7. For each user that you want to add: 1. Click **Edit**. 2. Under **Memberships**, click **Add**. 3. In the **Add Group Membership** form, select the checkbox for each group to add the user to. 8. Go to **Applications > My Applications**. 9. For each application you want to grant group access to: 1. Click the name of the application to expand it. 2. Click **Edit**. 3. Click **Continue to Next Step** on each tab until you reach the **Group Access** tab. 4. To grant group access to this application, click **Add**. #### Troubleshooting: Empty groups do not appear in the **Group Access** list. If your group does not appear in the list, go to step 7 to add users. 10. Click **Continue to Next Step**. 11. Click **Finish**. ## Configuring user access control for a third-party identity provider ### Before you begin To set up your PingOne Dock, you must have the following: * A PingOne account If you don't have a PingOne account, register at . * A connection between PingOne and an identity provider (IdP) Learn more about IdPs and connecting to them in [Connecting to an identity repository](https://docs.pingidentity.com/pingoneforenterprise/pingone_for_enterprise/p14e_connecting_idp.html). ### About this task | | | | - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | These steps apply only to third-party identity providers. If you are using PingOne Directory, learn more in [Configuring user access control for PingOne Directory](#configure-user-ac-pingone-dir). | PingOne user groups control user access to applications. As an administrator, you create user groups, manage the group's application permissions, and add or remove users to grant or limit their access to those applications. To display application icons in a user's dock, map at least one application to a group. ### Steps 1. Go to **Users > User Groups**. 2. Click **Add New Group**. 3. In the **New Group Name** field, enter a name for the group. 4. For each application to allow this group to access, select the corresponding checkbox. 5. Click **Save**. #### Result: The subsequent **User Groups** tab displays only the group you just created. | | | | - | -------------------------------------------------------------------------- | | | To view all of your user groups, click the **User Groups** tab to refresh. | ## Configuring the PingOne Dock ### About this task You can change the default settings of the PingOne Dock to customize your users' experience or comply with your security requirements. The following settings are optional. ### Steps 1. Go to **Setup > Dock**. 2. In the **Company ID** field, enter a company ID. The entry in this field becomes part of your PingOne Dock URL, which is displayed in the **PingOne Dock URL** field. 3. From the **Maximum Session Lifetime** list, select the session duration before PingOne signs a user out. 4. From the **Session Idle Timeout** list, select the amount of time before PingOne signs off an idle user. The default value of **- -** disables this feature. 5. Select the **Enable Basic SSO** box to enable users to vault passwords using the PingOne browser extension. 6. In the **User Support Message** field, enter a message to diplay when a user clicks the **Need Help?** link on the left navigation pane of the PingOne Dock. 7. For each attribute you want to map, select the attribute to map it to from the list. Your IdP automatically maps some attributes that can't be changed afterward. The pre-mapped attributes vary depending on your IdP. Learn more about advanced attribute mapping in [Assign advanced attribute mappings](https://docs.pingidentity.com/pingoneforenterprise/pingone_for_enterprise/p14e_assign_advanced_attribute_mappings.html). 8. Click **Save**. ## Adding your branding to the PingOne Dock ### About this task You can customize the colors, logos, and images of the PingOne Dock to match your organization's branding. Learn more about each part of the dock in [Introducing the PingOne Dock](https://docs.pingidentity.com/pingoneforenterprise/pingone_for_enterprise/p14e_introducing_p14e_dock.html) ### Steps 1. Go to **Setup > Branding > Dock**. 2. On the **Logo for Dock** line, select the image you want to use for the upper left corner of the dock. #### Choose from: * To use your existing logo image, click **Use Corporate Logo**. | | | | - | --------------------------------------------------------------- | | | To upload a corporate logo image, go to **Account > Branding**. | * To upload a new image, click **Custom** and then click the **Image** icon. 3. In the **Main Area** section, customize the image and font for the main area of your dock. 1. Under **Background**: * To apply the default white background, click **None**. * To upload a background image, click **Image**. * To enter or select a solid background color, click **Color**. 2. Click the **Font Color** color picker and enter or select a color for the text in the main area. 3. Under the **Drop Shadow** line, click **Yes** to apply a drop shadow to the text in the main area. 4. In the **Left Navigation Colors** section, enter or select the colors for the left navigation pane of your dock. 5. In the **Search Color** section, enter or select the colors for the search bar at the top of your dock. 6. In the **Sign Off** section, customize the screen that displays to users when they sign off from your dock. 1. Under **Main Background**: * To apply the default white background, click **None**. * To upload a background image, click **Image**. * To enter or select a solid background color, click **Color**. 2. From the **Form Color** picker, enter or select the color for the sign off page form. 3. From the **Font Color** picker, enter or select the color for the text in the sign off page form. 4. From the **Link Color** picker, enter or select the color for the link back to the sign on page. 5. In the **Page Text** field, enter the text that appears in the sign off page form. 7. Click **Save**. ### Next steps To view your applied changes, go to **Setup > Dock** and click the **PingOne Dock URL** to sign in as a user.