When does class start/end?
Class hours may vary, please reach out to contact@ascendientlearning.com if you have any questions.
PingOne Advanced Identity Cloud Deep Dive: Identity Management
The Getting Started With PingOne Advanced Identity Cloud for Administrators course introduced students to a broad range of the identity management and access management features of PingOne Advanced...
Read More
Duration
3 days
Course Code
AIC-420
Available Formats
Classroom, Virtual
Course Eligible for IBM Digital Badge
Overview
The Getting Started With PingOne Advanced Identity Cloud for Administrators course introduced students to a broad range of the identity management and access management features of PingOne Advanced Identity Cloud (Advanced Identity Cloud), formerly known as ForgeRock® Identity Cloud. Each lesson briefly covered the core concepts and basic implementation of a feature, but did not go into any depth. This course explores the identity management-related features in more depth, how they work, and the configuration options available during implementation.
Skills Gained
Upon completion of this course, you should be able to:
- Model a custom user profile onto an existing user managed object type, query objects using the REST interface, create an organization model, and describe the relationship properties between objects • Create and configure connections between external resources and Advanced Identity Cloud.
- Synchronize identity data across multiple external resources, in real-time or by scheduling reconciliation events, and consolidate multiple identity data stores into one centralized identity store
Who Can Benefit
The target audiences for this course include:
- Advanced Identity Cloud Administrators
- System Integrators
- System Consultants
- System Architects
- System Developers
Prerequisites
The following are the prerequisites for successfully completing this course:
- Completion of the Identity Management Essentials course available at: https://backstage.forgerock.com/university/forgerock/on-demand/path/TGVhcm5pbmdQYXRoOjM%3D/chapter/Q291cnNlOjE1NzI0
- Completion of the Getting Started With PingOne Advanced Identity Cloud for Administrators course available at: https://backstage.forgerock.com/university/forgerock/courses
Course Details
Chapter 1: Modeling Identities
Model a custom user profile onto an existing user managed object type, query objects using the REST interface, create an organization model, and describe the relationship properties between objects.
Lesson 1: Modeling an Identity Profile
Learn about the different object types in Advanced Identity Cloud, and how you can model a custom user profile onto an existing managed user object type in Advanced Identity Cloud:
- Review the Advanced Identity Cloud documentation
- Describe the different object types in Advanced Identity Cloud
- Map an identity object to a managed object
- Describe how to use placeholder attributes
- Model a managed user object in Advanced Identity Cloud
Lesson 2: Querying Identity Cloud Objects
Use the Identity Cloud Identity Management REST interface to query Identity Cloud objects:
- Describe how to query objects using the REST interface
- Describe how to use the Identity Cloud Postman collection
- Prepare Identity Cloud and configure the Identity Cloud Postman collection variables
- Query Identity Cloud objects using the Identity Cloud Postman collection
Lesson 3: Managing Organizations
Set up managed organizations to delegate user administration based on the owner of hierarchical trees:
- Describe the roles and privileges within an organization
- Implement the organization example
Lesson 4: Introducing Relationships
Describe relationships between managed objects:
- Describe the purpose of relationships
- Describe how relationships are stored in the schema
- Query an object relationship using the REST interface
Chapter 2: Managing Connectors
Create and configure connections between external resources and Advanced Identity Cloud.
Lesson 1: Connecting to External Resources Using Connectors
Describe the connectors supported in Advanced Identity Cloud, and how to create connector configurations to communicate with external resources:
- Describe how to connect external resources to Advanced Identity Cloud
- Configure communication between Identity Cloud and a Remote Connector Server (RCS)
- Describe how to connect to external resources using ICF connectors
Lesson 2: Configuring Connectors With the Admin UI
- Describe the process for creating a connector configuration using the admin UI
- Add a connector configuration for an external LDAP resource
Lesson 3: Configuring Connectors Over REST
- Describe the process for creating a connector configuration over REST
- Describe the core connector configuration settings
- Describe the object types and property mappings
- Generate a full connector configuration JSON object over REST
Lesson 4: Connecting to Databases
Describe the ICF connectors for connecting to databases, and how to create connector configurations to access identity data stored in SQL databases:
- Describe how to use the Database Table Connector
- Configure the Database Table Connector
- Describe how to use the Scripted SQL Connector
- Create a scripted SQL connector configuration
Lesson 5: Connecting to External Resources Using a Scripted REST Connector Configuration
- Describe the use cases for using a scripted REST connector
- Connect to DS using the scripted REST connector
Chapter 3: Managing Synchronization and Reconciliation
Synchronize identity data across multiple external resources, in real-time or by scheduling reconciliation events, and consolidate multiple identity data stores into one centralized identity store.
Lesson 1: Performing Basic Synchronization
Describe how to use the Identity Management admin UI to create synchronization mappings (sync mappings) to reconcile identities between Advanced Identity Cloud and an external resource:
- Describe how to create mappings to synchronize identity objects and properties
- Describe how to create a sync mapping from Advanced Identity Cloud to an external resource
- Describe how to add source and target properties to the sync mapping
- Describe how to add a correlation query and a situational event script
- Describe how to set the situational behaviors and run reconciliation
- Add a sync mapping from Advanced Identity Cloud to an LDAP server
- Describe the sync mapping from an LDAP server to Advanced Identity Cloud
- Add a sync mapping from an LDAP server to Advanced Identity Cloud
Lesson 2: Running Selective Synchronization and LiveSync
Filter objects that are synchronized and automate synchronization using LiveSync:
- Describe the different methods that you can use to filter entries
- Run selective synchronization using filters
- Describe how to use LiveSync to synchronize changes
- Trigger LiveSync on a connector
- Describe how to schedule LiveSync
- Schedule LiveSync with an external resource
Lesson 3: Configuring Role-Based Provisioning
Automatically provision users to a set of LDAP groups based on role membership:
- Describe how to provision attributes to a target system based on static role assignments
- Describe the steps to enable role-based provisioning
- Query the role assignment properties using the REST interface
- Provision attributes to a target resource based on static role assignments
- Describe how to provision attributes to a target system based on dynamic role assignments
- Provision attributes to a target resource based on dynamic role assignments
- Describe how to add temporal constraints to a role
- Add temporal constraints to a role
Schedule
1 options available
-
Jun 4, 2025 - Jun 6, 2025 (3 days)
Live Virtual | 9:00AM – 5:00PM EDT Language English Select from 1 options below Live Virtual |9:00AM – 5:00PM EDT- Enroll
- Enroll Add to quote
FAQ
Does the course schedule include a Lunchbreak?
Classes typically include a 1-hour lunch break around midday. However, the exact break times and duration can vary depending on the specific class. Your instructor will provide detailed information at the start of the course.
What languages are used to deliver training?
Most courses are conducted in English, unless otherwise specified. Some courses will have the word "FRENCH" marked in red beside the scheduled date(s) indicating the language of instruction.
What does GTR stand for?
GTR stands for Guaranteed to Run; if you see a course with this status, it means this event is confirmed to run. View our GTR page to see our full list of Guaranteed to Run courses.
How do I find an Ascendient Learning training location?
We have training locations across the United States and Canada - View a complete list of classroom training locations.
Which delivery formats are available?
At Ascendient Learning, we offer training that is Instructor-Led, Online, Virtual, and Self-Paced.
Does Ascendient Learning deliver group training?
Yes, we provide training for groups, individuals and private on sites. View our group training page for more information.
What does vendor-authorized training mean?
As a vendor-authorized training partner, we offer a curriculum that our partners have vetted. We use the same course materials and facilitate the same labs as our vendor-delivered training. These courses are considered the gold standard and, as such, are priced accordingly.
Is the training too basic, or will you go deep into technology?
It depends on your requirements, your role in your company, and your depth of knowledge. The good news about many of our learning paths, you can start from the fundamentals to highly specialized training.
How up-to-date are your courses and support materials?
We continuously work with our vendors to evaluate and refresh course material to reflect the latest training courses and best practices.
Are your instructors seasoned trainers who have deep knowledge of the training topic?
Ascendient Learning instructors have an average of 27 years of practical IT experience and have also served as consultants for an average of 15 years. To stay current, instructors spend at least 25 percent of their time learning new, emerging technologies and courses.
Do you provide hands-on training and exercises in an actual lab environment?
Lab access is dependent on the vendor and the type of training you sign up for. However, many of our top vendors will provide lab access to students to test and practice. The course description will specify lab access.
Will you customize the training for our company’s specific needs and goals?
We will work with you to identify training needs and areas of growth. We offer a variety of training methods, such as private group training, on-site of your choice, and virtually. We provide courses and certifications that are aligned with your business goals.
How do I get started with certification?
Getting started on a certification pathway depends on your goals and the vendor you choose to get certified in. Many vendors offer entry-level IT certification to advanced IT certification that can boost your career. To get access to certification vouchers and discounts, please contact info@ascendientlearning.com.
Will I get access to content after I complete a course?
You will get access to the PDF of course books and guides, but access to the recording and slides will depend on the vendor and type of training you receive.
How do I request a W9 for Ascendient Learning?
View our filing status and how to request a W9.
Reviews
The labs and course material gave me valuable insights into cloud security architecture
The training was great . But i expected some of the Networking concepts would be covered in this certification .
Great class I learned a great deal from the material. There would seem to a large amount that I need to learn about.
ExitCertified provided great learning material and the instructor was great.
Good course. I appreciate the time the instructor put into teaching this class.
