CP-PingOne-IDG

Certified Professional - PingOne Identity Governance

Part of Certified Professional - PingOne Identity Governance

Targets: Product version not specified in the blueprint
Blueprint source: Official program roster, Ping Identity Certification Guide (verified 2026-07-22); delivered on PingOne Advanced Identity Cloud with Identity Governance functionality; format facts not captured from official sources this session; detailed objectives transcribed in full below from the official Certified Professional Study Guide PDF (relayed by PRIME 2026-07-22); per-objective study pointers authored in the enrichment wave (E3, 2026-07-22) - pointers are ANVIL-authored study aids, not PDF content ↗

Independent study aid built from the public exam blueprint. Not affiliated with, authorized by, or endorsed by ping. Objectives are transcribed and mapped by hand, so this page may contain mistakes or may have fallen behind the vendor's current material: exam objectives, versions, numbering and availability all change without notice. Treat ping's own certification portal as the source of truth and verify against it before you book anything.

Section 1: Monitoring and Reporting

1.01 Manage reports
What to know:
- Report library: access, entitlement, and activity views
- Parameterized and scheduled reports
- Export for auditors; saved report definitions
1.02 Monitor reconciliations for applications
What to know:
- Reconciliation surfaces accounts vs authoritative identities
- Orphan and rogue account detection
- Per-application reconciliation status dashboards
1.03 Administer joiner, mover, and leaver workflows
What to know:
- Joiner: provision on hire; Mover: adjust on transfer; Leaver: deprovision on exit
- Lifecycle events drive access automatically
- Timeliness of leaver deprovisioning as an audit focus

Section 2: Compliance

2.01 Manage segregation of duties
What to know:
- Segregation of Duties: conflicting entitlements flagged
- SoD policies define toxic combinations
- Prevent at request time vs detect at certification
2.02 Manage certification campaigns
What to know:
- Certification campaigns: periodic reviewer attestation
- Reviewers approve/revoke access line items
- Campaign scope, schedule, and escalation for non-response

Section 3: Configuration

3.01 Manage scopes
What to know:
- Scopes bound what a role/policy governs
- Application and entitlement scoping
- Scope drives who sees what in requests and reviews
On this site: Erişim token'ları, yenileme token'ları ve kimlik token'ları, OAuth flows: choosing the grant in 2026
Tools: oauth-flow-chooser
3.02 Manage workflows
What to know:
- Approval workflows for access requests
- Multi-stage approvers and conditions
- Auto-approve/auto-reject policy branches
3.03 Configure access requests
What to know:
- Self-service access request catalog
- Request on behalf of; shopping-cart model
- Policy and SoD checks at request submission
3.04 Configure glossary
What to know:
- Business glossary maps technical entitlements to plain terms
- Human-readable descriptions for reviewers
- Glossary quality drives certification accuracy
3.05 Manage reconciliation
What to know:
- Reconciliation config: sources, schedules, correlation rules
- Correlation matches accounts to identities
- Handling unmatched and ambiguous accounts
3.06 Configure application connectors
What to know:
- Application connectors ingest accounts and entitlements
- Connector credentials and object mappings
- Schema discovery from the connected app
On this site: LDAP Fundamentals: The Directory Model Behind Identity Systems
Tools: ldap-filter-explainer
3.07 Configure forms
What to know:
- Forms shape request and review data capture
- Field validation and conditional visibility
- Bind forms to request and workflow steps
On this site: The JSON Grammar: Six Types and a Few Strict Rules
Tools: json-formatter

Section 4: Account Management and Administration

4.01 Troubleshoot and resolve governance issues
What to know:
- Governance troubleshooting: stuck workflows, failed provisioning
- Reconciliation mismatches and correlation fixes
- Audit trail to trace an access decision
4.02 Manage entitlements
What to know:
- Entitlements are the grantable units of access
- Grouping entitlements into roles/bundles
- Entitlement owners and descriptions for review

Public sources, used in good faith

These guides are independent study aids built from publicly available material: published exam blueprints, official product documentation, and vendor training catalogues. Product names, exam codes, and trademarks belong to their owners and are used only to identify the subject being taught. This site is not affiliated with or endorsed by any vendor named here. If you hold rights in material published on this page and believe it should be removed or corrected, please send the exact URL and a short note on the issue through the contact page; requests are reviewed promptly and in good faith. Read the full disclaimer →