PingOne DaVinci Training Course

About Course

PingOne training is structured as a 10-day program covering PingOne’s core modules and use cases. It spans foundational IAM concepts through advanced integration and a capstone project. The curriculum combines lectures, hands-on labs, quizzes and a final project. Below is an outline of modules, topics, labs and assessments, with prerequisites and certification guidance.

Prerequisites and Learning Path

Target Audience: IAM engineers and architects, sysadmins, devs new to PingOne.
Prerequisites: Basic networking, LDAP, and modern auth concepts. Familiarity with OAuth/OIDC and SAML is helpful. Completion of Ping Identity essentials (PingAM, PingDS, etc.) or equivalent knowledge is recommended . Some admin-level experience (3–6 months) with cloud IAM is ideal.
Certification Path: Prepares for the Ping Identity Certified Professional – PingOne certification (PICP-P1). This exam validates common PingOne admin tasks (user/app management, policies, federation, etc.). Earning PICP-P1 demonstrates readiness to operate PingOne in production.

Course Curriculum

Module 1: IAM and PingOne Platform Fundamentals (Day 1)

Topics: Identity & Access Management concepts; Ping Identity product suite; PingOne cloud platform architecture (Workforce vs. Customer (Advanced Identity Cloud)) . SaaS vs. on-prem models. PingOne tenant setup and admin UI.
Hands-on Lab: Navigate PingOne admin console, create realms/users/groups, explore dashboards.
Key Concepts: SSO basics (why IAM), cloud-based directories, PingDirectory overview. PingOne compliance/security features (MFA, risk, policy basics).
Assessment: Quiz on IAM concepts and PingOne architecture; lab completion checklists.

Module 2: User Store & Provisioning (Day 2)

Module 3: Identity Orchestration (DaVinci) (Day 3)

Module 4: Security and MFA (Day 4)

Module 5: Federation and SAML SSO (Day 5)

Module 6: OAuth2/OIDC (Day 6)

Module 7: Social Login and API Integration (Day 7)

Module 8: Access Management (PingAccess) (Day 8–9)

Module 9: Directory, Federation and Troubleshooting (Day 10)

Course Logistics and Materials

Recommended Certification

Your Instructors

kodestree

0 Rating 72 Courses 0 Students

PingOne DaVinci Training Course

kodestree

IAM

March 16, 2026

About Course

Course Curriculum

Module 1: IAM and PingOne Platform Fundamentals (Day 1)

Topics: Identity & Access Management concepts; Ping Identity product suite; PingOne cloud platform architecture (Workforce vs. Customer (Advanced Identity Cloud)) . SaaS vs. on-prem models. PingOne tenant setup and admin UI.

Hands-on Lab: Navigate PingOne admin console, create realms/users/groups, explore dashboards.

Key Concepts: SSO basics (why IAM), cloud-based directories, PingDirectory overview. PingOne compliance/security features (MFA, risk, policy basics).

Assessment: Quiz on IAM concepts and PingOne architecture; lab completion checklists.

Module 2: User Store & Provisioning (Day 2)

Topics: User identity stores: LDAP fundamentals, PingDirectory installation (on-prem) and PingOne Directory (cloud) . Population management (users, groups, attributes).

Provisioning: Bulk import (CSV) vs. live sync concepts; connecting identity stores to PingOne (e.g. Connector setup with Postman/Bruno).

LDAP Lab: Install an LDAP server (e.g. ApacheDS), create schema/DIT, sync users to PingOne.

Provisioning Lab: Use CSV import and API (Postman) to provision users and groups into PingOne; test live sync.

Assessment: Worksheet on population design; lab report.

Module 3: Identity Orchestration (DaVinci) (Day 3)

Topics: PingOne DaVinci orchestration engine (no-code workflows) . DaVinci console UI, Canvas nodes, flow branching, subflows.

Use Cases: Registration and login journeys, conditional logic, multi-channel authentication.

Hands-on Lab: Build a sample registration/login flow using DaVinci: e.g. integrate Google OAuth or SMS OTP step. Verify conditional steps (e.g. device or group-based step-up).

Assessment: Quiz on orchestration concepts; lab design critique.

Module 4: Security and MFA (Day 4)

Topics: Trust and PKI (keys, certificates, CSR generation) for signing/encryption . Multi-Factor Authentication methods in PingOne (email/SMS OTP, Push, FIDO2/WebAuthn).

Use Cases: Policybased MFA triggers, FIDO authenticator setup.

PKI Lab: Generate key pairs and import signing/encryption certs into PingOne.

MFA Lab: Configure an MFA policy (e.g. require OTP or FIDO) and enroll a user’s device; test login.

Assessment: Scenario quiz: “Which MFA method to use?”, lab validation.

Module 5: Federation and SAML SSO (Day 5)

Topics: SAML 2.0 protocol in PingOne. Just-In-Time (JIT) provisioning via SAML assertions. IdP vs. SP-initiated SSO; SAML 6-step flow . Metadata, certificate management for SAML.

SAML Lab: Configure PingOne as SAML IdP and SP; perform SP-initiated and IdP-initiated logins using a demo app. Enable JIT provisioning to auto-create users from SAML attributes. Use SAML tracer tools to debug.

Assessment: Quiz on SAML steps and roles; review SAML workflow lab exercise.

Module 6: OAuth2/OIDC (Day 6)

Topics: OAuth2 and OpenID Connect fundamentals . Authorization flows: Authorization Code, Implicit, PKCE, Client Credentials, and Resource Owner grants . Token types (ID, Access, Refresh) and validation. PKCE and mobile considerations.

OIDC Lab: Register an OIDC client in PingOne and test login flows (Auth Code + PKCE) using a browser or Postman.

Grant Lab: Use Postman to exercise Client Credentials, Resource Owner, and Refresh token flows .

Assessment: Lab report on grant behaviors; quiz on grant use cases.

Module 7: Social Login and API Integration (Day 7)

Topics: PingOne as a Social OIDC/OAuth broker. Configuring external IdPs (Google, Facebook, etc.) . Webhooks: definition and use for custom logic. Attribute mapping and transformation between systems.

Social Login Lab: Configure PingOne to use Google as an external IdP; enable “Login with Google” on an app.

API Lab: Use PingOne REST APIs (or PingAccess/IDM APIs) for user management (CRUD) and for fetching audit logs. Test with curl or Postman.

Assessment: Quiz on social login config; lab integration checklists.

Module 8: Access Management (PingAccess) (Day 8–9)

Topics: PingAccess policy server overview . Architecture: Gateways, Agents, Sites, Sessions and Stores . Protecting web apps/APIs via PingAccess with PingOne as token provider. Performance and clustering in SaaS mode.

PingAccess Lab: Deploy PingAccess on-prem; configure a protected web application and register PingOne as the OAuth provider.

Hybrid Login Flows: Test SSO across on-prem and SaaS apps (PingAccess PingOne).

Operations Lab: Set up health alerts/monitors for PingOne; simulate system events.

Assessment: Scenario exercise on choosing access control strategy; lab success criteria.

Module 9: Directory, Federation and Troubleshooting (Day 10)

Topics: Review PingDirectory and PingFederate roles (brief). Server engineering deep-dive (Docker, multizone deployment). Monitoring/logging (PingOne logs, transaction logs) and troubleshooting methodologies.

Troubleshooting Clinic: Given a broken SSO/MFA flow, use logs and tracing tools to diagnose (instructorled).

Capstone Project: End-to-end scenario: deploy a new application using PingOne (configure directories, auth policies, login flow, MFA, and audit logs). This “Go-Live Simulation” ties all learning objectives together

Assessment: Final practical exam (capstone project demo) and written quiz on advanced topics.

Course Logistics and Materials

Delivery: Instructor-led (ILT or virtual), with interactive lectures (slide decks) and live demos . Emphasis is on hands-on labs (80% lab exercises).

Labs: Each module includes guided labs using PingOne tenant(s) and open-source tools (Postman, OpenSSL, SAML tracer). Sample environments include pre-provisioned PingOne/PingAccess tenants and LDAP/PingDirectory VMs.

Materials: Course slideware, lab guides, cheat-sheets (OAuth/SAML flows). Provide PingOne trial accounts or use Ping’s sandbox for hands-on practice. Supply digital certificate examples for PKI labs.

Assessments: Quizzes or short tests after each module (to reinforce concepts). A final capstone project counts as the summative assessment. Attendance and lab completion certificates awarded.

Recommended Certification

At course end, students are prepared to take Ping Identity Certified Professional – PingOne (PICP-P1) . Optionally, those focused on workforce IAM can also pursue

Ping Identity Certified Professional – PingFederate (for on-prem federation) or ForgeRock Certified Professional – PingOne Advanced.

Identity Cloud (for the CIAM variant). The curriculum covers the bulk of the PICP-P1 objectives (tenant setup, SSO config, MFA, APIs, etc.), ensuring readiness for the official exam.

Your Instructors

kodestree

This course includes:

Related Courses

Enterprise IAM Engineer...

Quick Links

Courses

Contact Us