Before you start
The person going through the setup process below needs to be able to Create new Integrations in the Ping Identity environment instance for your organization.
Connection Steps
In your Adaptive admin portal, navigate to the Employees Tab and select 'Sources'. In the Primary Identity Source section, click Choose Primary Identity Source and then select Ping Identity SCIM in the modal.
Follow the instructions in the Ping Identity install wizard. Click on Generate Token to get the authentication token you will enter into your SCIM Provisioning Connection in Ping Identity.
Ping Identity Setup
As an Ping Identity administrator, log into the Ping Identity app and navigate to the workspace environment where you manage the users you want on the Adaptive platform. Click Integrations → Provisioning on the left menu bar.
Creating the new Connection
Click the plus arrow and select `New Connection`.
In the drawer that appears on the right, the first step is to select Identity Store → Next, then search for `SCIM Outbound` and select next.
The second step is to customize the Connection logo and name
The third step is configuring and testing authentication. Set the following values before clicking `Test Connection`:
SCIM BASE URL: https://api.adaptivesecurity.com/v1/
SCIM version: 2.0
User Resource (leave as is): /Users
Groups Resource (leave as is): /Groups
Authentication Method: OAuth 2 Bearer Token
OAuth Access Token: Copy your token from the Adaptive Admin portal from earlier in these setup instructions
Auth Type Header: Bearer
Once these values are in, click `Test Connection` to verify that your setup can reach the Adaptive platform.
The fourth step is to configure preferences. Change the `Remove Action` at the bottom of the drawer to be `Disable` and then click Save.
The final step for Connection creation is to click on the newly created Connection in your list and toggle it to active in the top of the drawer.
Creating the new Rule
You must also create a Rule which tells Ping Identity what users to sync to Adaptive. Click the same blue plus sign → Rule. Name the rule `AdaptiveUsers` and click Save.
Click the newly created `AdaptiveUsers` Rule and then click on `Configuration in the drawer that appears. Search for the Connection you just made previously `AdaptiveUserSync` and click the + next to it. Ensure that the Adaptive Connection populates the `Target` box on the right and that Ping Identity populates the Source box on the left. Click Save.
Now we will walk through the rest of the Rule configuration that appears after having been saved. The first is `User Filter`. Click the blue pencil icon and edit this to select the users you want on synced to the Adaptive platform. For example, users in specific groups, all active users, etc.
Next is `Attribute Mapping`, leave this as is.
Next is `Group Provisioning`. Add any groups that you have in Ping Identity that you want to sync to an Adaptive user’s profile by clicking on the blue pencil.
Once these steps are done, enable the Rule by clicking the toggle at the top of the drawer. This will show an overview of the sync in progress.
FAQ
How often does Adaptive use the integration to refresh employee records?
Ping Identity will push data on user creation and user updates. It is always possible to manually ‘Synchronize’ data by navigating to the `AdaptiveUsers` Rule in Ping Identity and clicking Resync. Adaptive has no ability to kick off a refresh of data on your behalf (without access to your Ping Identity admin experience).