Bring Sso
to Windsurf

Revokes all current session tokens, nullifies application scopes, isolates SCIM directory references, and executes the formal deletion API. Hard delete a user identity and purge related credentials

Determines configured Implicit/Authorization Code grants, token lifespan definitions, embedded sign-on policies, and allowed callback URIs required for stringent redirection security mapping. Get configuration for a single federated Ping Identity application

View explicit details encompassing a standard Ping Group

Get complete contextual metadata for a specific Ping Identity user

Crucial to verify application exposure footprint. List Web, Native or SPA apps federated under standard PingOne

Allows mapping high-level RBAC scopes dynamically injected into ID tokens returned via SSO channels upon successful client authorization flows. List identity Groups utilized for aggregate permissions

g., 'Contractors', 'Partners', 'B2B Clients') possessing inherently different default password complexities, independent password expiration parameters, and isolated self-service recovery scopes. List isolated Populations logically partitioning the Environment

Evaluates contextual IP anomalies, impossible travel, blocklisted VPN routes, or behavioral irregularities explicitly stepping up authentication flows or directly blocking malicious login execution. List active Risk Management rules dictating real-time MFA

Sign-on policies chain distinct rules together enforcing explicit MFA prompts, enforcing complex password structures based on population assignment, or mandating implicit biometric validation prior to releasing environment tokens. List logical Sign-on flows and strict authentication conditions

Paginates across all bounded external and internal localized users containing primary credentials, deeply nested JSON identifiers, and physical verification states assigned under the Enterprise Directory schema. List all user identities within the standard PingOne Environment