PingOne Worker App and User Config ¶
PingOne Worker App Configuration ¶
To manage PingOne resources using credentials other than your own, you are required to have a PingOne Worker App.
You have 3 options to authenticate to PingOne from pingctl:
- Authorization Code (w/ PKCE) Flow (Recommended and most secure) - Via a PingOne Admin User
- Implicit Flow - Via a PingOne Admin User
- Client Credentials Flow (Easiest, but most insecure, as a user isn't required)
Additionally, you must set up the proper roles for your Worker App
Authorization Code (w/ PKCE) Flow Settings ¶
The following shows an example of a Worker App setup for Authorization Code (w/ PKCE) Flow:
Implicit Flow Settings ¶
The following shows an example of a Worker App setup for Implicit Flow:
Client Credentials Flow Settings ¶
The following shows an example of a Worker App setup for Client Credentials Flow:
Worker App Roles Settings ¶
The following shows an example of the minimum roles required. Typically, these are set up by default.
PingOne User Config ¶
When using Authorization Code or Implicit Flows, you need to log in with an Administrative user to use the Worker App.
The most important item is to add the proper administrative roles to the user. The following shows an example of this:
