Manage ESVs using the API

You can find background information on ESVs in PingOne Advanced Identity Cloud in ESVs.

ESV API endpoints

Advanced Identity Cloud provides these API endpoints for ESVs:

Variables API endpoint
Secrets API endpoint
Restart API endpoint

If you plan to delete an ESV using the variables or secrets API endpoints, you may first need to remove references to it from your environment. Learn more in Preconditions to delete an ESV.

Authenticate to ESV API endpoints

To authenticate to ESV API endpoints, use an access token created with one of the following scopes:

Scope Description

Scope	Description
`fr:idc:esv:*`	Read, create, update, delete, and restart access to ESV API endpoints.
`fr:idc:esv:read`	Read access to ESV API endpoints.
`fr:idc:esv:update`	Create, update, and delete access to ESV API endpoints.
`fr:idc:esv:restart`	Restart access to ESV API endpoints.

fr:idc:esv:*

Read, create, update, delete, and restart access to ESV API endpoints.

fr:idc:esv:read

Read access to ESV API endpoints.

fr:idc:esv:update

Create, update, and delete access to ESV API endpoints.

fr:idc:esv:restart

Restart access to ESV API endpoints.

Service account access tokens granted the fr:idm:* scope also have access to API endpoints under the fr:idc:esv:* scope. However, this behavior is deprecated.