PingOne Connector Release Notes

New

You can now use the Read Theme capability to get theme details with the theme ID. This helps when designing PingOne DaVinci multi-brand experiences.

New

You can now use the Update User through Gateway capability to retrieve a user’s attributes through a PingOne gateway and update the PingOne user profile with them.

Improved

The Authenticate User via Kerberos capability now supports the selection of a user type, regardless of whether user migration is enabled or not.

The ability to select a user type without user migration allows you to create DaVinci flows to offer seamless SSO authentication experience to users provisioned from Microsoft Active Directory into PingOne through an LDAP gateway provisioning connection and an inbound rule.

Improved

You can now use the Read Population capability to include the default preferred language to support building an authentication experience.

Improved

You can now use the Update User capability to clear user attributes from a user profile.

Improved

You can now use the Read Population capability to determine a user’s population based on an alternative identifier value and can also specify a theme to support multi-brand authentication experiences.

Improved

The following capabilities allow you to manage group metadata.

Improved

The following capabilities now update the p1userid global variable in DaVinci with the user ID when the user is successfully found:

This update allows you to use the p1userid global variable in the flow to ensure the user ID will be populated at the right times.

New

You can use the new Authenticate User Via Kerberos capability to authenticate Active Directory users seamlessly through the Kerberos protocol.

New

Previously, when searching for users with Find User and Find Multiple Users, the capability builds a SCIM filter based on a list of attributes and a search term.

You can now provide your own filter by toggling on the new Custom SCIM Filter field, allowing you to pick the operators used for filtering and allow different values to be searched for each attribute.

Improved

The Create User and Update User capabilities mappings no longer pass empty values to PingOne. Previously, PingOne sent an error to DaVinci due to empty values.

If a field is included with no value, the connector would normally pass it to PingOne as an empty string. If no field or value is included, the connector would normally pass it as a null value. Now, these values are omitted and not passed as empty values.

New

The new Unlock User capability allows you to unlock a locked PingOne user account:

New

To support group manipulation during flows in DaVinci, we have added the following capabilities:

These allow you to create, manage, and read groups in a PingOne environment.

New

You can now use the Find Multiple Users capability to search and return up to 100 users.

New

The following new capabilities allow you to manage which groups a user belongs to:

Combined with the existing Read User Group Memberships capability, this provides you with a more complete membership management experience.

New

The new Migrate User through Gateway capability allows you to authenticate a user against an LDAP gateway set up in PingOne, then automatically migrate the account to the main PingOne user store.

By integrating this into your existing authentication flow, you can migrate users gradually as they sign on.

The Gateway User Type List property allows you to filter by specific gateways and user types.

New

This change allows you to set a flag that forces a user to set a new password next time they sign on.

Previously, the new password had to be set by the administrator when flagging the account.

Improved

When configuring a connector capability, DaVinci now populates properties, such as Population and Agreement, with information from PingOne.

Your existing configuration still works, and you can always select Use Population ID (or the equivalent) to show a manual entry field. This lets you manually enter a value or use a dynamic value from your flow.

Improved

Previously, the Create User and Update User capabilities allowed you to define additional user attribute mappings by manually typing attributes and values in the Other Attributes section.

To make the configuration more convenient, the attribute names and data types are now populated automatically from your PingOne environment.

Improved

All connector capabilities now use the default error messages from the PingOne API. This makes it easier to set up a flow with meaningful error messages.

You can override these messages on the Mappings (Error Messages) tab of the capability configuration.

Improved

When configuring capabilities that need a population, you can now select Use Default Population instead of selecting a specific population.

When you set a default population in PingOne, all capabilities with this setting will automatically use that population.

New

You can use the PingOne connector to: