Ping Identity MCP Server

delete_user

Revokes all current session tokens, nullifies application scopes, isolates SCIM directory references, and executes the formal deletion API. Hard delete a user identity and purge related credentials

get_application

Determines configured Implicit/Authorization Code grants, token lifespan definitions, embedded sign-on policies, and allowed callback URIs required for stringent redirection security mapping. Get configuration for a single federated Ping Identity application

get_group

View explicit details encompassing a standard Ping Group

get_user

Get complete contextual metadata for a specific Ping Identity user

list_applications

Crucial to verify application exposure footprint. List Web, Native or SPA apps federated under standard PingOne

list_groups

Allows mapping high-level RBAC scopes dynamically injected into ID tokens returned via SSO channels upon successful client authorization flows. List identity Groups utilized for aggregate permissions

list_populations

g., 'Contractors', 'Partners', 'B2B Clients') possessing inherently different default password complexities, independent password expiration parameters, and isolated self-service recovery scopes. List isolated Populations logically partitioning the Environment

list_risk_policies

Evaluates contextual IP anomalies, impossible travel, blocklisted VPN routes, or behavioral irregularities explicitly stepping up authentication flows or directly blocking malicious login execution. List active Risk Management rules dictating real-time MFA

list_sign_on_policies

Sign-on policies chain distinct rules together enforcing explicit MFA prompts, enforcing complex password structures based on population assignment, or mandating implicit biometric validation prior to releasing environment tokens. List logical Sign-on flows and strict authentication conditions

list_users

Paginates across all bounded external and internal localized users containing primary credentials, deeply nested JSON identifiers, and physical verification states assigned under the Enterprise Directory schema. List all user identities within the standard PingOne Environment