> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/server/web-interface/administration/configuration/server-settings/general/authentication/pingone.md).

# PingOne

PingOne, a renowned cloud-based identity and access management (IAM) solution provided by Ping Identity, offers secure single sign-on (SSO) capabilities, multifactor authentication (MFA), and user provisioning features. By integrating PingOne with Remote Desktop Manager, organizations can leverage these robust security features directly within their remote desktop management environment.

### Required applications

In PingOne, permissions are assigned based on the type of application. For a ***worker***, permissions come from predefined roles, while permissions for all other types of apps come directly from the user. For PingOne we need ***two applications*** unlike Azure or Okta.

### Worker application

This application is used to find users and groups from the directory.

![](https://cdnweb.devolutions.net/docs/DVLS6062_2024_1.png)

#### Required roles

Both ***Environment Admin*** and ***Identity Admin*** roles are required.

![](https://cdnweb.devolutions.net/docs/DVLS6059_2024_1.png)

#### Required configuration settings

The following are the required configuration settings in PingOne.

![](https://cdnweb.devolutions.net/docs/DVLS6061_2024_1.png)

#### Authentication app

Here are the required configuration settings for the application used to authenticate a user to our system using their PingOne identity. The required configuration settings are located in the ***Overview tab***.

{% hint style="info" %}
The basic URL for the worker application is ***api.pingone.\[com, ca, eu, asia]/v1***. Note that the URL depends on where PingOne is deployed.
{% endhint %}

![](https://cdnweb.devolutions.net/docs/DVLS6063_2024_1.png)

![](https://cdnweb.devolutions.net/docs/DVLS6064_2024_1.png)

### PingOne authentication settings in Devolutions Server

In Devolutions Server web interface, go to ***Administration – Server Settings – Authentication***. Check ***Authenticate with PingOne user*** and click ***PingOne authentication***.

![](https://cdnweb.devolutions.net/docs/docs_en_server_ServerOp6118.png)

The following is a description of the authentication settings for PingOne in Devolutions Server.

![](https://cdnweb.devolutions.net/docs/docs_en_server_ServerOp6119.png)

#### General

<table><thead><tr><th width="154">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><em><strong>Display Name</strong></em></td><td>The name displayed in the PingOne dashboard for identifying an application or resource.</td></tr><tr><td><em><strong>Environment ID</strong></em></td><td>A unique identifier assigned by PingOne to differentiate between specific operational environments (e.g., development, testing, production).</td></tr></tbody></table>

#### Authentication configuration

<table><thead><tr><th width="139">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Domain</strong></td><td>The domain used in authentication processes, often reflecting the organization's primary internet domain, to identify the organization in PingOne.</td></tr><tr><td><em><strong>Client ID</strong></em></td><td>A unique identifier provided by PingOne for an application, facilitating OAuth 2.0 authentication by distinguishing it from others.</td></tr><tr><td><em><strong>Client Secret</strong></em></td><td>A secret key given by PingOne, used with the Client ID for OAuth 2.0 authentication, ensuring secure access to the application.</td></tr></tbody></table>

#### Synchronize users and groups

<table><thead><tr><th width="156">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><em><strong>Domain</strong></em></td><td>The internet domain associated with the organization for user and group synchronization purposes, typically the organization's email domain. The URL is <em><strong>api.pingone.[com, ca, eu, asia]/v1</strong></em>. Note that the URL depends on where PingOne is deployed.</td></tr><tr><td><em><strong>Client ID</strong></em></td><td>An identifier for the application or service used by PingOne for managing user and group synchronization processes.</td></tr><tr><td><em><strong>Client Secret</strong></em></td><td>A secret key used alongside the Client ID to securely sync users and groups between the organization's directory services and PingOne.</td></tr><tr><td><em><strong>Test Connection</strong></em></td><td>Test and verify that the settings for user and group synchronization are correctly configured and operational with PingOne.</td></tr></tbody></table>

#### Automatic user creation

<table><thead><tr><th width="236">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><em><strong>Auto Create on First Login</strong></em></td><td>Enables the automatic creation of user accounts in PingOne when they log in for the first time.</td></tr><tr><td><em><strong>User Type</strong></em></td><td>Specifies the role or permissions for users automatically created upon their first login, affecting their access within the PingOne platform.</td></tr><tr><td><em><strong>Only from this group</strong></em></td><td>Limits the automatic creation of user accounts to individuals who are members of a particular group.</td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/server/web-interface/administration/configuration/server-settings/general/authentication/pingone.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.