Getting started with PingOne Authorize
To get started, add the PingOne Authorize service to your PingOne environment.
When your environment includes PingOne Authorize, you’re ready to use API Access Management. To use dynamic authorization, add a worker application connection for the PingOne Authorize service.
Adding the PingOne Authorize service to your environment
Before you begin
-
If you don’t have a PingOne account yet, start a PingOne trial.
-
Make sure you can sign on to the PingOne admin console.
-
Add an environment to organize your services.
-
Make sure you have the Environment Admin and Identity Data Admin roles in your PingOne environment. These roles grant permissions to the worker app you’ll create for PingOne Authorize. For more information, see Managing user roles.
Steps
-
In your PingOne environment, go to Overview.
-
Next to Services, click the icon.
-
Click Add to add the PingOne Authorize service.
-
In the Add a Service window, click Finish.
PingOne Authorize is displayed in the left navigation pane.
Adding a worker application for the PingOne Authorize service
After PingOne Authorize is in your PingOne environment, add a worker application to enable dynamic authorization API actions for the service.
About this task
PingOne integrates with client applications through application connections that define access to PingOne resources. A worker application is a userless service application connection that can perform administrator functions. Access is encoded in the worker application’s access token, which you submit with API requests. Learn more about how PingOne manages access to applications in Applications.
You must assign the Environment Admin and Identity Data Admin roles to the worker app after you create it. Learn more in Configuring roles for a worker application. |
Steps
-
In PingOne, go to Applications → Applications.
-
Click the icon next to Applications.
-
For Application Name and Description, enter a unique identifier for the application and a brief characterization of the application.
-
For the Application Type, click Worker.
-
Click Save.
Result:
The Applications page displays your worker application.
-
On the Roles tab, click Grant Roles.
-
In Available responsibilities, select the following roles:
-
Identity Data Admin role for your environment
-
Environment Admin role for your organization, or for a specific environment
The Granted responsibilities tab provides a simplified view of your selected roles.
-
-
Click Save.
-
To enable the application, click the Enable toggle.
Next steps
Complete these tutorials to familiarize yourself with PingOne Authorize capabilities: