PingOne - Nango Docs

🚀 Quickstart
🧑‍💻 OAuth app setup
🔗 Useful links
🚨 API gotchas

Create an integration

In Nango (free signup), go to Integrations -> Configure New Integration -> PingOne. Nango doesn’t provide a test OAuth app for PingOne yet. You’ll need to set up your own by following these instructions. After that, make sure to add the OAuth client ID, secret, and scopes in the integration settings in Nango.

Authorize PingOne

Go to Connections -> Add Test Connection -> Authorize, then log in to PingOne. Later, you’ll let your users do the same directly from your app.

Call the PingOne API

Let’s make your first request to the PingOne API (fetch a list of all environments). Replace the placeholders below with your secret key, integration ID, and connection ID:

cURL
Node

curl "https://api.nango.dev/proxy/v1/environments?limit=10" \
  -H "Authorization: Bearer <NANGO-SECRET-KEY>" \
  -H "Provider-Config-Key: <INTEGRATION-ID>" \
  -H "Connection-Id: <CONNECTION-ID>"

Install Nango’s backend SDK with npm i @nangohq/node. Then run:

import { Nango } from '@nangohq/node';

const nango = new Nango({ secretKey: '<NANGO-SECRET-KEY>' });

const res = await nango.get({
    endpoint: '/v1/environments',
    providerConfigKey: '<INTEGRATION-ID>',
    params: {
      limit: 10
    },
    connectionId: '<CONNECTION-ID>'
});

console.log(JSON.stringify(res.data, null, 2));

Or fetch credentials dynamically via the Node SDK or API.

✅ You’re connected! Check the Logs tab in Nango to inspect requests.

Next step: Embed the auth flow in your app to let your users connect their PingOne accounts.

If you don’t have a PingOne account, you can sign up for a free trial.Once your account is ready, sign in to your PingOne admin console.

Add an OIDC Web App

In the admin console, select Applications → Applications.
Click the + icon next to Applications to add a new app.
In the Application Name field, enter a name for your application.
Select OIDC Web App as the Application Type.
Click Save.

Configure the OIDC Web App

Click on the Configuration tab, then click on the pencil icon to edit configuration settings.
Check the Refresh Token checkbox, then add https://api.nango.dev/oauth/callback as your Redirect URIs.
From the Token Endpoint Authentication Method dropdown, select Client Secret Post.
Click the Save button.
Navigate to the Resources tab, then click the pencil icon. Select the scopes your app needs from the list. You can refer to the PingOne scopes documentation for details.
Click Save to apply your changes.

Obtain OAuth credentials

Click the toggle at the upper right to enable the application.
Navigate to the Overview tab and copy your Client ID and Client Secret as you will need them when configuring your integration in Nango.

Follow the Quickstart to start using your PingOne integration.

Common Scopes

Scope	Description
`p1:read:user`	Allows an application to retrieve user profile information and attributes.
`p1:update:user`	Allows updating user identity attributes, such as name, email, or custom fields.
`p1:read:userPassword`	Allows reading the password state (e.g., expired, needs reset) for a user.
`p1:reset:userPassword`	Allows resetting the user’s password.
`p1:read:device`	Allows retrieving the user’s registered MFA devices.
`p1:update:userMfaEnabled`	Allows enabling or disabling multi-factor authentication (MFA) for a user.

Topic	Links
Authorization	Guide to connect to PingOne using Connect UI
General	PingOne Website
	How to access your instance Admin console home page
Developer	PingOne API Documentation
	OAuth 2.0 Authorization code grant type Guide
	Access services through scopes
	Application Management
	Working with PingOne APIs
	API Rate Limiting

Contribute useful links by editing this page

Questions? Join us in the Slack community.

​Common Scopes

Common Scopes