Configure a Progressive Profiling Sign-On Action
Number of APIs: 17
This activity shows you how to create a sign-on policy with a progressive profiling action, initiate an authorization request, and use the flow APIs to complete the progressive profiling action.
The following operations are supported by the PingOne APIs:
- Create an application
- Create a sign-on policy
- Create login and a progressive profiling sign-on policy actions
- Create a user
- Initiate an authorize request
- Use flow APIs to login the user and add a mobile phone number
- Verify the addition of a mobile phone number to the user record
Prerequisites
Get an access token from the worker application that you created in Getting Started with the PingOne APIs. To get a token from a different worker application in an alternate sandbox environment, run the token request endpoint using the client ID and client secret of your chosen worker app to authenticate the request. For more information, see GET a Worker Application Access Token.
Workflow order of operations
To complete a progressive profiling flow, the following tasks must be completed successfully:
Make a
POSTrequest to/environments/{{envID}}/applicationsto add a new application to the specified environment.Make a
GETrequest to/environments/{{envID}}/applications/{{appID}}/secretto return the new application'ssecretattribute.Make a
GETrequest to/environments/{{envID}}/resourcesto return a list of all resource entities associated with the specified environment to get the ID for the PingOne platform resource.Make a
GETrequest to/environments/{{envID}}/resources/{{resourceID}}/scopesto list all scopes associated with a specified resource (the PingOne platform resource).Make a
POSTrequest to/environments/{{envID}}/applications/{{appID}}/grantsto create a new resource access grant for the application.Make a
POSTrequest to/environments/{{envID}}/signOnPoliciesto create a new sign-on policy.Make a
POSTrequest to/environments/{{envID}}/signOnPolicies/{{signOnPolicyID}}/actionsto define the login action associated with this sign-on policy.Make a
POSTrequest to/environments/{{envID}}/signOnPolicies/{{signOnPolicyID}}/actionsto define the progressive profiling action associated with this sign-on policy.Make a
POSTrequest to/environments/{{envID}}/applications/{{appID}}/signOnPolicyAssignmentsto associate the sign-on policy with the application.Make a
POSTrequest to/environments/{{envID}}/populationsto create a new population resource.Make a
POSTrequest to/environments/{{envID}}/usersto create a user who will be assigned to the new population resource.Make a
POSTrequest to/environments/{{envID}}/users/{{userID}}/passwordto set the new user's password.Make a
POSTrequest to/{{envID}}/as/authorizeto obtain an authorization grant. This request starts the authorization flow.Make a
GETrequest to/{{envID}}/flows/{{flowID}}to initiate the flow.To complete the login action, make a
POSTrequest toGET /{{envID}}/flows/{{flowID}}and provide the user's login credentials.To complete the progressive profiling action, make a
POSTrequest toGET /{{envID}}/flows/{{flowID}}and provide the user's mobile phone number.Make a
GETrequest to/{{envID}}/as/resume?flowId={{flowID}}to call the resume endpoint and return the auth code.After the authorization flow completes, make a
POSTrequest to/{{envID}}/as/tokento exchange the auth code for an access token.Make a
GETrequest to/environments/{{envID}}/users/{{userID}}to view the updated information about the identified user.
-
Step 4: Get all scopes GET {{apiPath}}/environments/{{envID}}/resources/{{p1ResID}}/scopes
-
Step 5: Create the resource access grant POST {{apiPath}}/environments/{{envID}}/applications/{{AppWithPPID}}/grants
-
Step 6: Create the new sign-on policy POST {{apiPath}}/environments/{{envID}}/signOnPolicies
-
Step 12: Set user password PUT {{apiPath}}/environments/{{envID}}/users/{{progressiveProfileUserID}}/password
-
Step 8: Create the progressive profiling sign-on policy action POST {{apiPath}}/environments/{{envID}}/signOnPolicies/{{ProgressiveProfilingPolicyID}}/actions
-
Step 9: Assign the sign-on policy to an application POST {{apiPath}}/environments/{{envID}}/applications/{{AppWithPPID}}/signOnPolicyAssignments
-
Step 10: Create a population for profile users POST {{apiPath}}/environments/{{envID}}/populations
-
Step 17: Call the resume endpoint GET {{authPath}}/{{envID}}/as/resume?flowId={{flowID}}
-
Step 13: Send an authorization request GET {{authPath}}/{{envID}}/as/authorize?response_type=code&client_id={{AppWithPPID}}&redirect_uri=https://www.google.com
-
Step 14: Get the flow GET {{authPath}}/{{envID}}/flows/{{flowID}}