--- title: "PingOne AIC" slug: "pingone-aic" updated: 2026-04-01T16:34:23Z published: 2026-04-01T16:34:23Z canonical: "docs.databee.buzz/pingone-aic" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # PingOne AIC PingOne AIC is an identity and access management platform that helps organizations securely manage user identities, authentication, and access to applications. For more information refer to the [PingOne AIC documentation](https://docs.pingidentity.com/pingoneaic/home.html). **Integration Method**: API **Tables**: User Inventory Info (5003) This integration supports the following events. | **Event** | **Description** | | --- | --- | | Users | Returns all information for all managed users from all configured realms in the repository. | This integration supports the following versions. | PingOne AIC API version | HTTP requests can optionally include the Accept-API-Version header with the value of the resource version, such as resource=2.0. If no Accept-API-Version header is included, the latest resource version is invoked by the HTTP request. | | --- | --- | > [!NOTE] > **Note**: > > In the DataBee implementation, the Accept-API-Version header is not included. The API invokes the latest resource version by default. ## Prerequisites - The user should have access to the PingOne AIC Dashboard with Administrator privileges. - The user should have access to the DataBee console. ## Configuration Overview 1. [Create a Service Account](/user-manual/docs/pingone-aic#create-a-service-account) in PingOne Advanced Identity Cloud and generate its Service Account ID and private key (JWK) with the required scopes to access the APIs. 2. Add the [PingOne Advanced Identity Cloud data feed](/user-manual/docs/pingone-aic#databee-configuration) in the DataBee console with the below parameters. | **DataBee Parameter** | **PingOne AIC Parameter** | | --- | --- | | API Base URL | [Base URL](/docs/pingone-aic#intance) | | Token URL | [Base URL](/docs/pingone-aic#intance) | | Audience | [Base URL](/docs/pingone-aic#intance) | | Issuer ID | [Service Account ID](/docs/pingone-aic#service_account_id) | | Subject ID | [Service Account ID](/docs/pingone-aic#service_account_id) | | Private Key | [Private Key](/docs/pingone-aic#private_key) | | Realm Names | [Realm names](/docs/pingone-aic#realm_names) | ## PingOne AIC Configuration 1. Log in to the **PingOne Advanced Identity Cloud** admin dashboard. In the screenshot shown below, the highlighted URL represents the **instance API URL**. Save this URL for later use, as it will be required while configuring the data feed. The relevant part is highlighted in red. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-lyqasbq8.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) 2. For **Realm Names**, go to the top-left corner, click on the currently selected realm name and choose **Switch realm...**. - From there, copy the realm names for which you want to fetch the managed users and use them while configuring the data feed for PingOne Advanced Identity Cloud. - Click **Cancel**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-uu8ov42e.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-ut1w26ze.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) ### Create a Service Account 1. Navigate to Profile > **Tenant settings**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-zhwa7eeo.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) 2. Under **Tenant Settings**, navigate to **Global Settings**, then scroll and click on **Service Accounts**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-11ov0nm6.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) 3. Under **Service Accounts**, click on **+ New Service Account**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-tzyn69ll.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) 4. In the **New Service Account** page, provide the following details: 1. **Name**: A human-readable name for the service account. 2. **Description (Optional)**: A brief description to help identify the purpose of the service account. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-y75x1hyf.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) 3. **Scopes**: Select the required scopes **fr:am:*** and **fr:idm:***. 4. Click **Save**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-e40tds8q.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-qgddn7xr.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) 5. After clicking **Save**, the service account will be created successfully, and a confirmation window will appear. 1. Click **Copy** next to the **Service Account ID** and save it for later use. 2. Click **Download Key** to download the private key (JWK). > [!NOTE] > **Note**: > > Securely store the downloaded key, as it will be required for authentication and it’s only appearing once, so keep it safe. 3. Click **Done** to finish the process. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-q71jhw2f.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) ## DataBee Configuration 1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-2dv2ea9x.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) 2. Search for the **PingOne Advanced Identity Cloud** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-71l3yhtp.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) 3. Click on the **API Ingest** option for the collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-bn42q2os.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) 4. Enter feed **contact information**, keep Entity Resolution checkbox checked if you want it else uncheck it and scroll down. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-7w95ed1z.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) 5. In the configuration section, confirm the following: - **API Base URL**: This is the base URL that DataBee will interact with Replace the with your [instance](/docs/pingone-aic#intance) value that was copied earlier. - **Authorization Method**: JWT Auth - **Token URL**: Replace the with your [instance](/docs/pingone-aic#intance) value that was copied earlier. - **Issuer ID**: Paste the [service account ID](/docs/pingone-aic#service_account_id) that you copied earlier. - **Subject ID**: Paste the [service account ID](/docs/pingone-aic#service_account_id) that you copied earlier. - **Audience**: Replace the with your [instance](/docs/pingone-aic#intance) value that was copied earlier. - **Private key:** Paste the content of the downloaded [private key file](/docs/pingone-aic#private_key). - **Realm names**: Enter the realm names (comma-separated) for which you want to fetch data. - **Event Types**: Preselected for all the event types that integration pulls. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-mv4ufs8i.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) 6. Click on the **Submit** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-6ydztg7p.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) ## Troubleshooting Tips - Ensure the service account has the required scopes and make sure the correct private key has been pasted. - Verify that the correct realm name is provided (comma-separated if multiple). An incorrect value may result in a wrong realm error. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/pingone-aic-image-2i4m773t.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A11%3A37Z&se=2026-10-30T13%3A11%3A37Z&sr=c&sp=r&sig=9ChI4oK%2B6CGQ9ypx04zDR0MUJ9FUJgLLJA3XZL3Ydf0%3D) #