--- title: Ping Identity DevOps Docker Image - pingdelegator description: This docker image provides an NGINX instance with PingDelegator that can be used in administering PingDirectory Users/Groups. component: devops page_id: devops::docker-images/pingdelegator/README canonical_url: https://developer.pingidentity.com/devops/docker-images/pingdelegator/README.html section_ids: devops-ping-identity-docker-image: Ping Identity Docker Image - pingdelegator devops-related-docker-images: Related Docker Images devops-environment-variables: Environment Variables devops-run: Run devops-docker-container-hook-scripts: Docker Container Hook Scripts --- # Ping Identity DevOps Docker Image - `pingdelegator` ## Ping Identity Docker Image - `pingdelegator` This docker image provides an NGINX instance with PingDelegator that can be used in administering PingDirectory Users/Groups. ### Related Docker Images * `pingidentity/pingbase` - Parent Image > This image inherits inherits, and can use, Environment Variables from [pingidentity/pingbase](https://devops.pingidentity.com/docker-images/pingbase/) * `pingidentity/pingcommon` - Common Ping files (i.e. hook scripts) ### Environment Variables In addition to environment variables inherited from **[pingidentity/pingbase](https://devops.pingidentity.com/docker-images/pingbase/)**, the following environment `ENV` variables can be used with this image. | ENV Variable | Default | Description | | -------------------------------------- | -------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | SHIM | ${SHIM} | | | IMAGE\_VERSION | ${IMAGE\_VERSION} | | | IMAGE\_GIT\_REV | ${IMAGE\_GIT\_REV} | | | DATE | ${DATE} | | | PING\_PRODUCT\_VERSION | ${VERSION} | | | PD\_DELEGATOR\_PUBLIC\_HOSTNAME | localhost | | | PD\_DELEGATOR\_HTTP\_PORT | 6080 | | | PD\_DELEGATOR\_HTTPS\_PORT | 6443 | | | PING\_PRODUCT | PingDelegator | Ping product name | | PF\_ENGINE\_PUBLIC\_HOSTNAME | localhost | The hostname for the public Ping Federate instance used for SSO. | | PF\_ENGINE\_PUBLIC\_PORT | 9031 | The port for the public Ping Federate instance used for SSO. NOTE: If using port 443 along with a base URL with no specified port, set to an empty string. | | PF\_DELEGATOR\_CLIENTID | dadmin | The client id that was set up with Ping Federate for Ping Delegator. | | PD\_ENGINE\_PUBLIC\_HOSTNAME | localhost | The hostname for the DS instance the app will be interfacing with. | | PD\_ENGINE\_PUBLIC\_PORT | 1443 | The HTTPS port for the DS instance the app will be interfacing with. | | PD\_DELEGATOR\_TIMEOUT\_LENGTH\_MINS | 30 | The length of time (in minutes) until the session will require a new login attempt | | PD\_DELEGATOR\_HEADER\_BAR\_LOGO | | The filename used as the logo in the header bar, relative to this application's build directory. Note about logos: The size of the image will be scaled down to fit 22px of height and a max-width of 150px. For best results, it is advised to make the image close to this height and width ratio as well as to crop out any blank spacing around the logo to maximize its presentation. e.g. '${SERVER\_ROOT\_DIR}/html/delegator/images/my\_company\_logo.png' | | PD\_DELEGATOR\_DADMIN\_API\_NAMESPACE | | The namespace for the Delegated Admin API on the DS instance. In most cases, this does not need to be set here. e.g. 'dadmin/v2' | | PD\_DELEGATOR\_PROFILE\_SCOPE\_ENABLED | false | Set to true if the "profile" scope is supported for the Delegated Admin OIDC client on PingFederate and you wish to use it to show the current user's name in the navigation. | | NGINX\_WORKER\_PROCESSES | auto | The number of NginX worker processes — Default: auto | | NGINX\_WORKER\_CONNECTIONS | 1024 | The number of NginX worker connections — Default: 1024 | | STARTUP\_COMMAND | nginx | The command that the entrypoint will execute in the foreground to instantiate the container | | STARTUP\_FOREGROUND\_OPTS | -c ${SERVER\_ROOT\_DIR}/etc/nginx.conf | The command-line options to provide to the the startup command when the container starts with the server in the foreground. This is the normal start flow for the container | | STARTUP\_BACKGROUND\_OPTS | ${STARTUP\_FOREGROUND\_OPTS} | The command-line options to provide to the the startup command when the container starts with the server in the background. This is the debug start flow for the container | ### Run To run a PingDelegator container with HTTPS\_PORT=6443 (6443 is simply a convention for PingDelegator so conflicts are reduced with other container HTTPS ports): ```shell docker run \ --name pingdelegator \ --publish 6443:6443 \ --detach \ --env PING_IDENTITY_ACCEPT_EULA=YES \ --env PING_IDENTITY_DEVOPS_USER \ --env PING_IDENTITY_DEVOPS_KEY \ --tmpfs /run/secrets \ pingidentity/pingdelegator:edge ``` PingDelegator requires running instances of PingFederate/PingDirectory. ### Docker Container Hook Scripts Please go [here](https://github.com/pingidentity/pingidentity-devops-getting-started/tree/master/docs/docker-images/pingdelegator/hooks/README.md) for details on all pingdelegator hook scripts *** This document is auto-generated from *[pingdelegator/Dockerfile](https://github.com/pingidentity/pingidentity-docker-builds/blob/master/pingdelegator/Dockerfile)* Copyright © 2026 Ping Identity Corporation