API Access Management

The PingOne Authorize API access management service provides tools to externalize the management and evaluation of access control policies for HTTP-based APIs. The access control policies defined in the API Service configuration are enforced through an API gateway, which delegates policy evaluation using a Ping Identity-provided integration kit that connects with the PingOne API.

The integration kit installed in your API gateway authenticates to PingOne. You configure a gateway and obtain a gateway credential. This credential is used to configure the API gateway integration kit. For more information, refer to PingOne Authorize API Gateway Integration Kits.

To create a gateway resource, refer to Create API Gateway Integration. In addition, API access management also uses the gateways credentials service. For more information, refer to Gateway Credentials.

When you create an API service, PingOne Authorize automatically creates an authorization module associated with that service. The module has its own policy space, which means policies you define within the API service’s module are scoped to that service and evaluated independently. The new module shares the Trust Framework of the Default module, including attributes, services, processors, and conditions, but maintains a separate space for policies. For more information, refer to Authorization Modules.