Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Contact Us
Ping Identity - AskJ1 Community
<main> <article class="userContent"> <h2 data-id="ping-identity-jupiterone-integration-benefits">Ping Identity + JupiterOne Integration Benefits</h2> <ul><li><p>Visualize Ping Identity users, groups, applications, and roles in the<br> JupiterOne graph.</p></li> <li><p>Map Ping Identity users to employees in your JupiterOne account.</p></li> <li>Monitor changes to Ping Identity users using JupiterOne alerts.</li> </ul><h2 data-id="how-it-works">How it Works</h2> <ul><li><p>JupiterOne periodically fetches users, groups, applications, and roles from<br> Ping Identity to update the graph.</p></li> <li><p>Write JupiterOne queries to review and monitor updates to the graph, or<br> leverage existing queries.</p></li> <li><p>Configure alerts to take action when JupiterOne graph changes, or leverage<br> existing alerts.</p></li> </ul><h2 data-id="requirements">Requirements</h2> <ul><li><p>JupiterOne requires an access key key. You need permission to create a worker<br> application in Ping Identity that will be used to obtain the API key.</p></li> <li><p>You must have permission in JupiterOne to install new integrations.</p></li> </ul><h2 data-id="support">Support</h2> <p>If you need help with this integration, please contact<br><a rel="nofollow" href="https://support.jupiterone.io">JupiterOne Support</a>.</p> <h2 data-id="integration-walkthrough">Integration Walkthrough</h2> <h3 data-id="in-ping-identity">In Ping Identity</h3> <ol><li><a rel="nofollow" href="https://apidocs.pingidentity.com/pingone/devguide/v1/api/#create-an-application-connection">Create an application connection</a> <ol><li>Click Connections.</li> <li>Click + Add Application.</li> <li>Select the Worker application type.</li> <li>Click Configure.</li> <li>Create the application profile by entering the following information: <ul><li>Application name. A unique identifier for the application.</li> <li>Description (optional). A brief characterization of the application.</li> <li>Icon (optional). A pictorial representation of the application. Use a<br> file up to 1MB in JPG, JPEG, GIF, or PNG format.</li> </ul></li> <li>Click Save and Close.</li> <li>The Applications page shows the new application. To view the application's<br> access token, you must enable the new application:</li> <li>Click the Enable toggle switch at the right. The toggle switch shows green<br> to indicate that the new application is enabled.</li> </ol></li> <li><a rel="nofollow" href="https://apidocs.pingidentity.com/pingone/devguide/v1/api/#create-an-application-connection">Get an access token</a> <ol><li>Click the application's details icon (located to the right of the<br> enable/disable button).</li> <li>Click the Configuration tab.</li> <li>Click Get Access Token.</li> <li>From the Access Token window, click Copy Access Token to copy the access<br> token.</li> </ol></li> <li><a rel="nofollow" href="https://apidocs.pingidentity.com/pingone/devguide/v1/api/#:\~:text=get%20your%20environment%20ID%20from%20the%20Admin%20Console">Get your environment ID from the Admin Console</a> <ol><li>Click Settings.</li> <li>Click Environment.</li> <li>Click Properties.</li> </ol></li> </ol><h3 data-id="in-jupiterone">In JupiterOne</h3> <ol><li>From the top navigation of the J1 Search homepage, select <strong>Integrations</strong>.</li> <li>Scroll to the <strong>Ping Identity</strong> integration tile and click it.</li> <li>Click the <strong>Add Configuration</strong> button and configure the following settings:</li> </ol><ul><li><p>Enter the <strong>Account Name</strong> by which you'd like to identify this Ping Identity<br> account in JupiterOne. Ingested entities will have this value stored in<br><code class="code codeInline" spellcheck="false" tabindex="0">tag.AccountName</code> when <strong>Tag with Account Name</strong> is checked.</p></li> <li><p>Enter a <strong>Description</strong> that will further assist your team when identifying<br> the integration instance.</p></li> <li><p>Select a <strong>Polling Interval</strong> that you feel is sufficient for your monitoring<br> needs. You may leave this as <code class="code codeInline" spellcheck="false" tabindex="0">DISABLED</code> and manually execute the integration.</p></li> <li><p>Enter the <strong>AccessToken</strong>, <strong>Environment ID</strong>, and <strong>Location</strong> generated for<br> use by JupiterOne.</p></li> </ul><ol start="4"><li>Click <strong>Create Configuration</strong> once all values are provided.</li> </ol><h1 data-id="permissions">Permissions</h1> <p>The worker application must have READ permissions of the ingested resources<br> namely: USER, ROLES, GROUP, APPLICATION, and ENVIRONMENT.</p> <h1 data-id="how-to-uninstall">How to Uninstall</h1> <ol><li>From the top navigation of the J1 Search homepage, select <strong>Integrations</strong>.</li> <li>Scroll to the <strong>Ping Identity</strong> integration tile and click it.</li> <li>Identify and click the <strong>integration to delete</strong>.</li> <li>Click the <strong>trash can</strong> icon.</li> <li>Click the <strong>Remove</strong> button to delete the integration.</li> </ol><h2 data-id="data-model">Data Model</h2> <h3 data-id="entities">Entities</h3> <p>The following entities are created:</p> <table><thead><tr><th>Resources</th> <th>Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Entity <code class="code codeInline" spellcheck="false" tabindex="0">_class</code></th> </tr></thead><tbody><tr><td>Account</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_account</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Account</code></td> </tr><tr><td>Application</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_application</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Application</code></td> </tr><tr><td>Role</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_role</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">AccessRole</code></td> </tr><tr><td>User</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_user</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">User</code></td> </tr><tr><td>UserGroup</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_group</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">UserGroup</code></td> </tr></tbody></table><h3 data-id="relationships">Relationships</h3> <p>The following relationships are created:</p> <table><thead><tr><th>Source Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Relationship <code class="code codeInline" spellcheck="false" tabindex="0">_class</code></th> <th>Target Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> </tr></thead><tbody><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_application</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_role</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_user</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_application</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_role</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_user</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_user</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">pingone_role</code></td> </tr></tbody></table> </article> </main>
.png)