PingOne Advanced Identity Cloud

Enable the AI agents feature

The AI agents feature is enabled by default for sandbox tenants created on or after March 31, 2026. For sandbox tenants created before that date, you can enable the AI agents feature using the following steps:

  1. Check if the feature is already enabled by looking for the smart_toy AI Agents menu item in the left navigation menu of either realm in the Advanced Identity Cloud admin console. If the menu item is displayed, you can skip the rest of the steps.

  2. Check that your sandbox tenant supports application management using the Application management migration FAQ. If your tenant doesn’t support application management, contact your Ping Identity representative.

  3. Check that your sandbox tenant has groups enabled using the Group identity migration FAQ. If your tenant doesn’t have groups enabled, follow the feature enablement instructions in Group management.

  4. Enable the AI agents feature:

    1. Get an access token with the fr:am:* and fr:idm:* scopes.

    2. Make a POST request to the /environment/aiagent?_action=enable endpoint to enable the feature:

      $ curl \
--request POST 'https://<tenant-env-fqdn>/environment/aiagent?_action=enable' \(1)
--header 'Authorization: Bearer <access-token>'(2)
      1 Replace <tenant-env-fqdn> with the FQDN of your tenant environment.
      2 Replace <access-token> with the access token created in step 1.

    3. Examine the HTTP status code of the response:

      • If the response has a 200 HTTP status code, the enablement request was successful.

      • If the response has a 500 HTTP status code, the enablement request failed.

  5. (Optional) If the enablement request was successful, it may take up to 10 minutes for the AI agents feature to be fully enabled and accessible in the Advanced Identity Cloud admin console. Every few minutes, reload the Advanced Identity Cloud admin console in your browser, then verify if the AI agents feature is enabled by checking for the smart_toy AI Agents menu item in the left navigation menu of either realm.

  6. (Optional) If the enablement request failed:

    1. Double-check that your tenant environment meets the prerequisites in steps 2 and 3, and if necessary, repeat step 4 to try enabling the feature again.

    2. If you still can’t access the feature, open a support case with Ping Identity support:

      Show support guidance

      1. Go to https://support.pingidentity.com.

      2. Click Create a case.

      3. Follow the steps in the case submission wizard by selecting your account and contract and answering questions about your tenant environments.

      4. On the Please answer the following questions to help us understand the issue you’re facing page, enter the following details, and then click Next:

        Field Value

        What product family is experiencing the issue?

        Select PingOne Advanced Identity Cloud

        What specific product is experiencing the issue?

        Select Configuration

        What version of the product are you using?

        Select NA

        What Hostname(s) or Tenant ID(s) does this apply to?

        Enter the of FQDN for your sandbox tenant environment.

      5. On the Tell us about the issue page, enter the following details, and then click Next:

        Field Value

        Provide a descriptive title for your issue

        Enter Unable to enable AI agents feature

        Describe the issue below

        Enter one of the follwing descriptions based on the HTTP status code you received in step 4:

        * Received a 500 HTTP status code when making a POST request to the /environment/aiagent?_action=enable endpoint.

        * Received a 200 HTTP status code when making a POST request to the /environment/aiagent?_action=enable endpoint, but still can’t access the feature.

      6. Click Submit.

      7. Wait for Ping Identity support to respond to your case with next steps for troubleshooting the issue.