How to test if AD Connect has access to PingOne services

Published: 06/23/2016
1. Obtain Organization ID and Product Key.
The tests will require Organization ID and Product Key of AD Connect.
Follow the steps below if you don't have them handy.
1. Login to PingOne Admin Portal.
2. Navigate to Setup > Identity Repository
3. Click on the pencil icon.
4. Proceed to 4. INSTALL AD CONNECT and copy the value in ORGANIZATION ID field.
5. Login to AD Connect server.
6. For AD Connect with IIS open C:\Program Files (x86)\Ping Identity\ADconnect\SSO\Web.config with a text editor.  For AD Connect open C:\Program Files (x86)\Ping Identity\ADconnect\AuthenticationAgent\AuthenticationAgent.exe.config with a text editor.
7. Locate key="productKey" section and copy the Product Key value.

When carrying out the steps in section 2 below, you will be prompted to login similar to the example screen below. Enter the Organization ID into the User Name field and the Product Key into the Password field.
User-added image
2. Test if AD Connect server can access PingOne Configuration Service.
Point to https://connect.pingidentity.com/web-portal/adconnect/json/configuration/1.1 on a browser that runs on AD Connect server.
If it can successfully connect it returns something similar to the example below.
{"authLookup":"sAMAccountName","idpEntityId":"***","ssoUrl":"https://***","tokenLifetime":30,"intranetIpBlocks":["***","***","***"],"delauthLookup":"mail","delauthStripEmail":null,"delauthLookupFilter":null,"authStripEmail":null,"authLookupFilter":null,"authentication":"forms","connections":{"PingOne":{"spEntityId":"PingConnect","attributeList":[{"createOnly":false,"nameIdFormatToSendSp":null,"targetAttributeName":"SAML_SUBJECT","function":"concatenate","sourceList":[{"sourceAttribute":true,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceType":"attribute","expression":null,"sourceValue":"sAMAccountName","function":null,"dereferencedAttributeMap":null}],"attributeNameFormatToSendSp":null,"nameIdFormatToAskIdp":null,"required":true,"description":null},{"createOnly":false,"nameIdFormatToSendSp":null,"targetAttributeName":"SCIM.employeeNumber","function":"concatenate","sourceList":[{"sourceAttribute":true,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceType":"attribute","expression":null,"sourceValue":"employeeNumber","function":null,"dereferencedAttributeMap":null}],"attributeNameFormatToSendSp":null,"nameIdFormatToAskIdp":null,"required":false,"description":null},{"createOnly":false,"nameIdFormatToSendSp":null,"targetAttributeName":"SCIM.email","function":"concatenate","sourceList":[{"sourceAttribute":true,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceType":"attribute","expression":null,"sourceValue":"mail","function":null,"dereferencedAttributeMap":null}],"attributeNameFormatToSendSp":null,"nameIdFormatToAskIdp":null,"required":false,"description":null},{"createOnly":false,"nameIdFormatToSendSp":null,"targetAttributeName":"SCIM.department","function":"concatenate","sourceList":[{"sourceAttribute":true,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceType":"attribute","expression":null,"sourceValue":"department","function":null,"dereferencedAttributeMap":null}],"attributeNameFormatToSendSp":null,"nameIdFormatToAskIdp":null,"required":false,"description":null},{"createOnly":false,"nameIdFormatToSendSp":null,"targetAttributeName":"SCIM.userName","function":"concatenate","sourceList":[{"sourceAttribute":true,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceType":"attribute","expression":null,"sourceValue":"userPrincipalName","function":null,"dereferencedAttributeMap":null}],"attributeNameFormatToSendSp":null,"nameIdFormatToAskIdp":null,"required":false,"description":null},{"createOnly":false,"nameIdFormatToSendSp":null,"targetAttributeName":"SCIM.displayName","function":"concatenate","sourceList":[{"sourceAttribute":true,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceType":"attribute","expression":null,"sourceValue":"sAMAccountName","function":null,"dereferencedAttributeMap":null}],"attributeNameFormatToSendSp":null,"nameIdFormatToAskIdp":null,"required":false,"description":null},{"createOnly":false,"nameIdFormatToSendSp":null,"targetAttributeName":"SCIM.externalId","function":"concatenate","sourceList":[{"sourceAttribute":true,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceType":"attribute","expression":null,"sourceValue":"objectGUID","function":null,"dereferencedAttributeMap":null}],"attributeNameFormatToSendSp":null,"nameIdFormatToAskIdp":null,"required":false,"description":null},{"createOnly":false,"nameIdFormatToSendSp":null,"targetAttributeName":"SCIM.name.familyName","function":"concatenate","sourceList":[{"sourceAttribute":true,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceType":"attribute","expression":null,"sourceValue":"sn","function":null,"dereferencedAttributeMap":null}],"attributeNameFormatToSendSp":null,"nameIdFormatToAskIdp":null,"required":false,"description":null},{"createOnly":false,"nameIdFormatToSendSp":null,"targetAttributeName":"SCIM.group","function":"concatenate","sourceList":[{"sourceAttribute":false,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceType":"membership","expression":null,"sourceValue":"memberOf","function":null,"dereferencedAttributeMap":null}],"attributeNameFormatToSendSp":null,"nameIdFormatToAskIdp":null,"required":true,"description":null},{"createOnly":false,"nameIdFormatToSendSp":null,"targetAttributeName":"giveName","function":"concatenate","sourceList":[{"sourceAttribute":true,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceType":"attribute","expression":null,"sourceValue":"giveName","function":null,"dereferencedAttributeMap":null}],"attributeNameFormatToSendSp":null,"nameIdFormatToAskIdp":null,"required":false,"description":null},{"createOnly":false,"nameIdFormatToSendSp":null,"targetAttributeName":"SCIM.name.formatted","function":"concatenate","sourceList":[{"sourceAttribute":true,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceType":"attribute","expression":null,"sourceValue":"cn","function":null,"dereferencedAttributeMap":null}],"attributeNameFormatToSendSp":null,"nameIdFormatToAskIdp":null,"required":false,"description":null},{"createOnly":false,"nameIdFormatToSendSp":null,"targetAttributeName":"SCIM.name.givenName","function":"concatenate","sourceList":[{"sourceAttribute":true,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceType":"attribute","expression":null,"sourceValue":"givenName","function":null,"dereferencedAttributeMap":null}],"attributeNameFormatToSendSp":null,"nameIdFormatToAskIdp":null,"required":false,"description":null}],"spId":"PingOne","acsUrl":"https://sso.connect.pingidentity.com/sso/sp/ACS.saml2","defaultProfileId":null,"aclGroups":null}},"configVersion":"82e53e00209bdd806b53fafe2f845bd0fae53cf1","backchannels":["wss://den-routingsvc.pingone.com/routingsvc/wsc","wss://ore-routingsvc.pingone.com/routingsvc/wsc"],"enableGroupHierarchy":false}
3. Test if AD Connect server can access PingOne Provisioning Configuration Service 1.
Point to https://connect.pingidentity.com/web-portal/adconnect/json/provisioningconfiguration/1.0 on a browser that runs on AD Connect server.
If it can successfully connect it returns something similar to the example below.
{"adcPrivateData":"***","attributeList":[],"groupScanIntervalSecs":60,"userScanIntervalSecs":300,"configVersion":"***","provisioningServiceEndpointUrl":"https://scim.connect.pingidentity.com/prov-service","heartbeatIntervalSecs":300,"groups":[{"connections":[],"groupName":"CN=Domain Users,CN=Users,DC=***,DC=com","id":"***"},{"connections":[],"groupName":"CN=***,CN=Users,DC=***,DC=com","id":"***"}]}
4. Test if AD Connect server can access PingOne Provisioning Configuration Service 2.
Point to https://connect.pingidentity.com/web-portal/adconnect/json/provisioningconfiguration/2.0 on a browser that runs on AD Connect server.
If it can successfully connect it returns something similar to the example below.
{"configVersion":"***","heartbeatIntervalSecs":300,"groupScanIntervalSecs":60,"userScanIntervalSecs":300,"provisioningServiceEndpointUrl":"https://scim.connect.pingidentity.com/prov-service","attributeList":[{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"mail","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"emails[work]","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"telephoneNumber","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"phoneNumbers[work_phone]","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"mobile","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"phoneNumbers[mobile_phone]","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"department","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"department","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"c","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"addresses.country","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"00eo0000000qMKV","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"00eo0000000qMKV","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"pager","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"phoneNumbers[pager]","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"givenName","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"name.givenName","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"postalCode","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"addresses.postalCode","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"facsimileTelephoneNumber","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"phoneNumbers[fax]","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"l","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"addresses.locality","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"title","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"title","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"division","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"division","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"sn","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"name.familyName","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"st","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"addresses.region","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"streetAddress","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"addresses.streetAddress","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"sAMAccountName","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"displayName","createOnly":false,"required":false,"description":null},{"function":"concatenate","nameIdFormatToSendSp":null,"sourceList":[{"dereferencedAttributeMap":null,"sourceValue":"ping","function":null,"sourceLiteral":false,"sourcePredefinedRule":false,"sourceAttribute":true,"expression":null,"sourceType":"attribute"}],"nameIdFormatToAskIdp":null,"attributeNameFormatToSendSp":null,"targetAttributeName":"ping","createOnly":false,"required":false,"description":null}],"adcPrivateData":"ew0KICAiZGM9aHEsZGM9Y29tIjogew0KICAgICJzZXJ2ZXIiOiAiRlMyLmhxLmNvbSIsDQogICAgImhpZ2hlc3RVc2Vyc1VzbiI6IDU4Mzk1NSwNCiAgICAiaGlnaGVzdEdyb3Vwc1VzbiI6IDY2MjI5LA0KICAgICJoaWdoZXN0TWVtYmVyc2hpcHNVc24iOiA1NDgxNjANCiAgfQ0KfQ==","groups":[{"connections":["*** - Provisioning"],"groupName":"CN=Domain Users,CN=Users,DC=***,DC=com","id":"***"},{"connections":["*** - Provisioning"],"groupName":"CN=***,CN=Users,DC=***,DC=com","id":"***"}]}
5. Test if AD Connect server can access PingOne SCIM Provisioning Service 
Point to https://scim.connect.pingidentity.com/prov-service/v1/Directory/ on a browser that runs on AD Connect server.
If it can successfully connect it returns something similar to the example below.
<directoryInfo><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId></externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><groups><externalId>***</externalId></groups><users><externalId>***</externalId></users><users><externalId>***</externalId></users><users><externalId>***</externalId></users><users><externalId>***</externalId></users><members><entry><key>***</key><value/></entry></members></directoryInfo>
Category:
ADConnect , 
KB or other URL: