PingOne

Configure PingOne data sources for Cortex XSIAM.

You can configure collecting PingOne authentication logs and data using a standard collector, content pack integration (onboarded prior to July 26, 2026), or connector:

PingOne vendor	Description
Standard collector overview	Forward authentication logs and data to Cortex XSIAM from PingOne for Enterprise using the PingOne data source.
Link to standard collector instructions	Ingest authentication logs and data from PingOne
Link to content pack/integration details (onboarded prior to July 26, 2026)	The PingIdentity content pack provides capabilities to utilize PingOne's cloud identity and access management services for various triggering events. It includes the following integration: PingOne (Partner Contribution): Use this integration to integrate with the PingOne Management API. It includes commands to unlock, create, delete, and update users.
Link to connector	Ping Identity