[Components] pingone

[pipedream-component-development]

pingone

URLs

• https://apidocs.pingidentity.com/pingone/platform/v1/api/

Webhook Sources

new-user-created-instant

Prompt

Emit new event when a user is created in PingOne. Configure optional filters for specific user attributes or groups.

new-login-activity-instant

Prompt

Emit new event whenever a user logs in through PingOne. Configure optional filters for specific applications or user groups.

new-user-assigned-to-app-instant

Prompt

Emit new event when a user is assigned to an application via PingOne. Configure optional filters for specific applications or user attributes.

Actions

create-user

Prompt

Create a new user in PingOne. Specify required fields like username, email, and optional fields such as first name, last name, or group assignment.

update-user

Prompt

Update an existing user's attributes in PingOne. Specify the user ID and fields to update such as email, group assignments, or status.

assign-user-to-app

Prompt

Assign an existing user to a specific application in PingOne. Specify the user ID and target application's ID.

[jcortes]

Hi @sergio-eliot-rodriguez and @malexanderlim I couldn't test the app because I was getting the following error when tried to create a connection with the app

If I click on View details I get

I also tried with the global environment id located in Settings -> Environment Properties -> Environment ID but I got the same error

[sergio-eliot-rodriguez]

I found out about the issue here.

There are a few things.
The main problem is that the app within PingOne was somehow deleted, it was needed to create another.

I noticed that adding a BYOA client within Pipedream, generates a new Redirect URI, this implies that you have to add the new Redirecft URI to the app setup in PingOne.

Plus the usual caveats, the app has to be active, proper permissions, scopes added, and so on.

I'm assuming Jorge, or any other component developer will have to create a new app to add a new connection in their PD account,

So here are the steps, combining both Pipedream and Ping one for addding the new connection. Component devs will hae to create their own PingOne app.

In a PD workflow editor with the PingOne app added to one of the workflow steps, under the "Configure":

1. Click the display area where PingOne accounts are listed.
2. On the blue buttom "Connect new account", click the rightmost dropdown with the chevron (do not click the button itself, click the chevron on the right).
3. Click "+ New OAuth Client" with the "Advanced" tag
4. If prompted, click "Leave without deploying"
5. Click the "New OAuth Client" on the top right
6. Search for the PingOne app on the "Select an app" pop up and click it.
7. Enter a name of your choice
8. A pop up named "OAuth Client for PingOne" will be displayed
9. Copy the URl under "Redirect URI",
10. On a separate browser window, and using 1PW item "Pingone (console)" go to the website that contains the console.pingone.com domain.
11. Click "Administrators" on the left menu
12. From the page that opens, go to "Applications" section > "Applications" menu option
13. Click the plus sign "+" next to "Applications" at the top of the page
14. Add Application name, description per your choice
15. Under section "Application Type", select "OIDC Web App"
16. Hit "Save"
17. Open the "Configuration" tab and click the blue pencil on the right
18. Under section "Grant Type", Make sure "Authorization Code" is checked and check "Refresh token".
19. Under "Redirect URIs" add the Redirecft URL you copied on step 9.
20. Under "Token Endpoint Authentication Method" section select "Client Secret Post".
21. Go to "Resources" Tab and click the blue pencil on the right
22. Check the "email", "offline_access" options, make sure "openid" is already checked.
23. Above the tabs, at the right most of the row listing your app name, set the toggle to "on".
    24.Go to the "Configuration" tab and Copy Client Id, Client Secret, and Environment
24. Go to the browser window with Pipedream UI and the "OAuth Client for PingOne popup"
25. Fill the Client Id and Client Secret fields of the "OAuth Client for PingOne popup" from values you copied from PingOne on step 24.
26. Add "email" and "offline_access" values to the Scopes fill
27. Click save
28. Go back to your workflow with the step using PingOne
29. On the blue buttom "Connect new account", click the rightmost dropdown with the chevron (do not click the button itself, click the chevron on the right).
30. Select the OAuth client you named on step 7, and saved on step 28 after all the setup
31. Enter the Environemtn ID you copied on step 24.
32. Sing on using creds under 1PW item "Pingone (console)"

This should work, lmk other wise please

[sergio-eliot-rodriguez]

Ok I added current set of creds working clilent id, client secret, redirect uri, and environment id. These belong to app "Pipedesting" in PingOne

howvver, depending on your use case you may need to edit the app to add more scopes depending on the components to develop. just edit via the "Resources" tab and check scopes as needed.

[jcortes]

Hi @sergio-eliot-rodriguez thanks for these instructions they worked like a charm. However now I'm having another issue when trying to make requests to the api. Let's say I want to list all user populations, so here it is the request:

curl https://api.pingone.com/v1/environments/672eff2b-8bd1-4554-bebd-ad24382e8e9c/populations \
-H "Authorization: Bearer $OAUTH_ACCESS_TOKEN" \
-H "Content-Type: application/json"

then I get this as the response:

{
  "id":"4a4c075f-053e-4dea-92c3-417738a04e7c",
  "code":"ACCESS_FAILED",
  "message":"The actor attempting to perform the request is not authorized."
}

I tried to check all possible configurations, permissions scopes related to the app I created but the error was still hapenning, also I tried other endpoints like listing users, create a user, create a subscription (webhook) and they all return the same error so I'm moving it again to Blocked while we reachout to support team on PineOne. Thanks!