PingOne

Applying authentication policies to the application portal

The application portal itself is an OpenID Connect (OIDC)-based application. Like other OIDC-based applications, you can configure an authentication policy for the application portal.

The authentication policy defines the sign-on requirements for accessing the application.

Default domain

By default, the application portal Home Page URL is https://apps.pingone.<geography>/<envId>/myapps/

Custom domain

If you use a custom domain, the Home Page URL is https://<customDomain>/myapps/

Learn more about how authentication policies are evaluated in Authentication policies for applications.

To apply authentication polices to the application portal:

Steps

  1. In the PingOne admin console, go to Applications > Applications and click the PingOne Application Portal application to open the details panel.

  2. On the Policies tab, click the Pencil icon ().

  3. Select the policy that you want to apply.

  4. Click Save.

Result

PingOne applies the selected policies to the PingOne Application Portal application. Learn more about how authentication policies are evaluated in Authentication policies for applications.

Next steps

To control which authentication policy is used when users access the portal, append the policy HTTP request parameter to the end of the URL for the application when you share the URL with users.

For example, the application portal is configured with three authentication policies named One, Two, and Three, and the policies are listed in that order on the Policies tab. You want a certain group of users to use policy Two when accessing the portal. Before you share the URL for the portal with these users, append the policy parameter to the URL as follows:

If you’re using the default domain

https://apps.pingone.<geography>/<envId>/myapps/?policy=Two

If you’re using a custom domain

https://<customDomain>/myapps/?policy=Two

To use a PingOne DaVinci flow policy instead of an authentication policy, use the policy ID for the policy parameter value.

If the policy name or ID doesn’t match any configured policy, then PingOne returns an error.