Editing an outbound provisioning rule (early access)
You can edit an existing outbound rule to change the custom filter and attribute mapping.
|
You can’t change the source or target connection after a rule is created. |
Steps
-
In the PingOne admin console, go to Integrations > Provisioning
-
On the Rules tab, click the appropriate rule to open the details panel to edit the following:
-
On Overview tab, click the Pencil icon () to edit the Name or Description.
-
On the Directory tab, click () next to Users to enter or edit the following:
-
Click Add + to add another condition or condition set.
-
Select All or Any to determine how the linked conditions will be evaluated: Boolean logical AND or OR.
-
Attribute: The user attribute to filter on.
-
Operator: Equals is the only operator supported at this time.
-
Value: Enter the appropriate value.
If you select a group in the filter, updating or deleting the group can cause the provisioning rule to resync.
If you select a group in the filter, the filter will include all users with any kind of membership in the group. Learn more in Groups.
-
-
To delete a condition, click the Delete icon ().
-
-
On the Directory tab, click the next to Groups and enter or edit the following:
-
To search groups, enter a group name in the Search Group Name field.
-
To add groups, select a group in All Groups.
-
To remove a group, clear the checkbox for the group in All Groups.
-
To view provisioned groups, click Selected Groups.
-
To accept a merge or overwrite memberships when a group with the same name exists on the target, select the checkbox next to I understand and want to continue in the Merge Group Memberships or Overwrite Group Memberships modal.
Merging or overwriting memberships only applies to SCIM, Slack, and GitHub EMU provisioning connections. Learn more in Creating a Slack connection, Creating a SCIM connection, and Creating a GitHub EMU connection.
-
-
On the Attribute Mapping tab, click and enter or edit the following:
For Google Workspace, you must map the
addressFormattedattribute so the user’s address can appear in the Google admin portal. Learn more in Google Workspace attribute mapping. -
To add an attribute mapping, click Add and enter the source and target attributes.
-
To use the expression builder, click the Gear icon (). Learn more in Using the expression builder. You can also use list values in the expression builder to create advanced expressions, such as conditional statements.
-
Select values from the Expression list. Some attributes have metadata that define potential values.
-
-
(Optional) For Salesforce, Salesforce Communities, and Salesforce Leads and Contacts, select the Update checkbox to include the attribute mapping in updates.
The email attribute mapping is selected by default and included in updates.
-
To delete a mapping, click ().
-
-
Click Save.