Ping (PingOne)

What it covers

Identity governance: MFA configuration, per-user MFA, and activity-log access.

Credential to create

PingOne Worker application (client credentials)

Open the PingOne console

Permissions to grant

• Identity Data Read Only (users)
• Read MFA settings
• Read audit activities

Setup steps

1. In the PingOne admin console, add a Worker application (Applications > Applications > Add > Worker App).
2. Grant it the read roles above, scoped to the target environment.
3. Enter your Environment ID and, if you are not in the North America region, the regional base URL, and paste the worker token.

Notes and gotchas

• Base URL must match your region: https://api.pingone.com/v1 (NA), .eu, .asia, or .ca. A wrong region silently fails to authenticate.
• Worker tokens are short-lived; a durable client-credentials connection is the recommended path.