Overview
Torii integrates with PingOne Advanced Identity Cloud and syncs:
- Users and licenses from one realm of your tenant.
- You can constantly stay updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table.
Requirements
Accounts & Permissions
- A PingOne Advanced Identity Cloud tenant administrator account. Only tenant administrators can create service accounts.
Required keys
To connect this integration, we require the following:
- Tenant domain: your tenant's own domain, not a custom domain.
- Realm: the realm to sync, Alpha or Bravo.
- Service account ID
- Private key (JWK) of the service account
How to Generate the Required Values
Step 1: Create a service account
- In the Advanced Identity Cloud admin console, open the TENANT menu at the upper right and select Tenant settings.
- Select Global Settings > Service Accounts, then New Service Account.
- Enter a Name (for example, Torii).
- Under Scopes, select only fr:idm:*. Torii reads users through the IDM API, which requires this scope.
- Select Save.
- After the success message appears, copy the value in the ID field. This is the Service account ID.
- Select Download Key to download the private key, then select Done.
Important
You must download the private key when you create the service account. It won't be available again.
Step 2: Find your tenant domain
Your tenant domain is the domain in your admin console's address bar, without https:// or a path, for example openam-example.forgeblocks.com.
How to Connect the Integration
- Go to the Integrations page in Torii.
- Search for PingOne Advanced Identity Cloud and click Connect.
- Enter the tenant domain, select the realm, enter the service account ID, and paste the contents of the private key file.
- Click Connect.
Update the User Lifecycle settings
To make sure you get user lifecycle information in Torii, define PingOne Advanced Identity Cloud as your identity provider.
- Go to Settings >> Users & Employees and, under User lifecycle, click Manage sources.
- Under Identity Providers, select PingOne Advanced Identity Cloud. If PingOne Advanced Identity Cloud is your only source for user management, make sure the other sources are unselected.
- Click Preview changes, then Apply changes.
Q&A
Q: How do I sync more than one realm?
A: Connect the integration once per realm. Torii identifies each connection by its tenant domain and realm.
For any further questions, please contact Torii Support.