Skip to technology filters Skip to main content
Dynatrace Hub

Extend the platform,
empower your team.

Popular searches:
Home hero bg
PingOne Advanced Identity CloudPingOne Advanced Identity Cloud
PingOne Advanced Identity Cloud

PingOne Advanced Identity Cloud

Extension that collects PingOne Advanced Identity Cloud (ForgeRock) data.

Extension
Free trial
PingOne Advanced Identity Cloud overview dashboard.Some collected data on the tenant screen.Some collected data on the tenant screen.Log viewer showing where audit and debug log data will be available.
  • Product information
  • Release notes

Overview

PingOne Advanced Identity Cloud (formerly ForgeRock Identity Cloud) is a comprehensive IAM service. This extension allows you to ingest exposed metrics and logs.

Use cases

  • Use metrics to monitor performance and activity within your deployment
  • Use audit logs to investigate user and system behavior
  • Use debug logs to investigate issues in production
  • Use metrics and log data to alert on desired events

Details

Log events

Log events from various available sources (e.g. am-access, am-activity, idm-authentication, etc...) in the Identity Cloud logs API can be ingested. You can control the collection interval for logs.

Metrics

AM and IDM expose a variety of metrics via a Prometheus endpoint which the extension will ingest. Review the feature sets at the bottom of this page for details on the metrics available. These are collected once per minute.

Compatibility information

  • A supported Advanced Identity Cloud deployment that exposes the following APIs is required:
    • Audit and debug logs
    • Identity Manager Prometheus API
    • Access Management

Installation

Identity cloud configuration

To collect logs make sure you have an API key and secret.

In order to collect metrics, Prometheus monitoring must be enabled in the Identity Cloud environment. Review the Identity Cloud documentation here for details.

Dynatrace configuration

Find this extension in the in-product Extensions or Hub page or the Extensions Manager app and activate (if offline you can download the extension from this Hub page in the 'Versions' section and install as a custom extension).

Monitoring configurations

  • Dynatrace: these settings are required to ingest logs via the main Dynatrace API which can handle larger volumes
    • Dynatrace Environment ID
    • Dynatrace API Token: scope must include logs.ingest
    • Dynatrace ActiveGate API Port: default 9999 (make sure the ActiveGate API endpoint has not been disabled)
  • ForgeRock
    • Hostname
    • API Key
    • API Secret
    • Audit & debug log collection interval
    • Log sources
  • Log level

Feature sets

Review the available feature sets to determine which you want to enable and collect. The enabled feature sets will effect which commands are run to avoid running commands that are not needed.

Once activated in your environment you can create monitoring configurations.

Licensing

Licensing

There is no charge for obtaining the extension, only for the data (metrics & events) that the extension ingests. The details of license consumption will depend on which licensing model you are using. This will either be Dynatrace classic licensing or the Dynatrace Platform Subscription (DPS) model.

Metrics

License consumption is based on the number of metric data points ingested. The following formula will provide approximate annual data points ingested. Note that this will be highly dependent and variable based on traffic volume and patterns in your environment. For this reason, it will likely be more meaningful to run the extension for a period of time to determine metric consumption and then multiply that to get usage for a longer period (e.g. 1 year.)

Calculation estimates yearly DDU usage:

Identity Management:

((2 * providers * registration types) + (user types) (3 * operation per mangaged object) + (3 * unique action operation and outcome) + (audit topics) + (3 * oject mappings)) * 525.6

Access Management:

(3 + (5 * unique sessions and outcomes) + (1 * authentication outcomes) + (3 * unique operations by token type) + (2 * grants by type) + (2 * types of token issued) + (2 * unique authorization evaluations)) * 525.6

Log records

Log management and analytics (powered by Grail)

License consumption is based on the size (in bytes) of data ingested & processed, retained, and queried so there is not a single formula to estimate the total consumption from this extension. Consult the log management and analytics documentation for details on the other dimensions that will effect license consumption.

Classic licensing

In the classic licensing model, log record ingestion will consume Davis Data Units (DDUs) at the rate of 100 DDUs per Gigabyte of log records ingested.

Log monitoring classic

In log monitoring classic, license consumption is based on the number of ingested log records.

Classic licensing

In the classic licensing model, log record ingestion will consume Davis Data Units (DDUs) at the rate of .0005 DDUs per ingested log record.

Multiply estimated ingested log records by .0005 to estimate DDU usage from log records.

Provided by

Dynatrace

Support

By Dynatrace
Dynatrace support center
Subscribe to new releases
Copy to clipboard

Extension content

Content typeNumber of items included
screen logs cards
1
screen metric tables
3
dashboards
1
screen layout
1
metric metadata
34
list screen layout
1
screen entities lists
1
generic type
1
metric query
3
screen chart groups
8

Feature sets

Below is a complete list of the feature sets provided in this version. To ensure a good fit for your needs, individual feature sets can be activated and deactivated by your administrator during configuration.

Feature setsNumber of metrics included
Metric nameMetric keyDescriptionUnit
Self-service registrationsidm_selfservice_user_registration_countCount of all successful user self-service registrations by registration type and providerCount
Self-service password resetsidm_selfservice_user_password_reset_countCount of all successful user self-service password resets.Count
Successful loginsidm_user_login_countCount of all successful logins by user typeCount
Managed object operation durationidm_managed_secondsDuration of operations on a managed object by quantilesSecond
Operations on a managed objectidm_managed_countNumber of operations by managed objectCount
Managed object operation duration (overall)idm_managed_seconds_total.countTotal duration of operations on a managed objectSecond
Repository datasource action durationidm_repo_secondsDuration of actions to a repository datasource for a generic/explicit mapped table by quantilesSecond
Repository datasource actionsidm_repo_countCount of actions to a repository datasource for a generic/explicit mapped tableCount
Repository datasource action duration (overall)idm_repo_seconds_total.countOverall duration of actions to a repository datasource for a generic/explicit mapped tableSecond
Audit eventsidm_audit_countCount of all audit events generated of a given topic typeCount
Mapping configuration duration (quantiles)idm_sync_objectmapping_secondsDuration of configurations applied to a mapping by quantilesSecond
Mapping configurationsidm_sync_objectmapping_countNumber of configurations applied to a mappingCount
Mapping configuration duration (overall)idm_sync_objectmapping_seconds_total.countTotal duration of configurations applied to a mappingSecond
Metric nameMetric keyDescriptionUnit
Identity Cloud availabilityforgerock_identity_cloud.availabilityAvailability as determined by checking for OK status from the '/monitoring/health' URLPercent
Metric nameMetric keyDescriptionUnit
Session operationsam_session_countSession operations (e.g. 'check-exists', 'create', 'add-pll-listener')Count
Session operation duration (quantiles)am_session_secondsDuration of session opertaions (e.g. 'check-exists', 'create', 'add-pll-listener') by quantileSecond
Session operation duration (overall)am_session_seconds_total.countTotal duration of session operations (e.g. 'check-exists', 'create', 'add-pll-listener') by quantileSecond
Total session lifetimeam_session_lifetime_seconds_total.countTotal session lifetimeSecond
Total session lifetime measurement countam_session_lifetime_countCount of measurements for total session lifetimeCount
Authenticationsam_authentication_countAuthentications by outcome (e.g. 'success', 'failure', 'timeout')Count
CTS total task timeam_cts_task_queue_seconds_total.countTotal time taken to perform CTS operations by type (e.g. 'create', 'read', 'delete')Second
CTS task queue sizeam_cts_task_queue_sizeNumber of items waiting in a CTS queueCount
CTS task durationam_cts_task_secondsTime taken to perform CTS tasks by operation typeSecond
CTS tasksam_cts_task_countCTS tasks by operation typeCount
CTS task total durationam_cts_task_seconds_total.countTotal time taken to perform CTS tasks by opertaion typeSecond
OAuth 2.0 grant completionsam_oauth2_grant_countOAuth 2.0 grant completions by grant typeCount
OAuth 2.0 grant revocationsam_oauth2_grant_revoke_countOAuth 2.0 grant revocations by grant typeCount
OAuth 2.0 token issuancesam_oauth2_token_issue_countOAuth 2.0 token issuances by token typeCount
OAuth 2.0 token revocationsam_oauth2_token_revoke_countOAuth 2.0 token revocations by token typeCount
Policy evaluation callsam_authorization_policy_set_evaluate_countPolicy evalutaion calls under a given policy typeCount
Policy evaluation call durationam_authorization_policy_set_evaluate_seconds_total.countPolicy evaluation call duration by policy set and outcomeSecond

Full version history

To have more information on how to install the downloaded package, please follow the instructions on this page.
ReleaseDate

Full version history

  • Fixed an issue where certain logs (e.g. idm-core) were not being ingested.

Full version history

  • Initial release
Dynatrace Hub
Get data into DynatraceBuild your own app
All (762)Log Management and AnalyticsKubernetesAI and LLM ObservabilityInfrastructure ObservabilitySoftware DeliveryApplication ObservabilityApplication SecurityDigital ExperienceBusiness Analytics
Filter
Type
Built and maintained by
Deployment model
SaaS
  • SaaS
  • Managed
Partner FinderBecome a partnerDynatrace Developer

Discover recent additions to Dynatrace

Problems logo

Problems

Analyze abnormal system behavior and performance problems detected by Davis AI.

Logs logo

Logs

Explore all your logs without writing a single query.

Security Investigator logo

Security Investigator

Fast and precise forensics for security and logs on Grail data with DQL queries.

Business Flow logo

Business Flow

Track, analyze, and optimize your critical business processes.

Cost & Carbon Optimization logo

Cost & Carbon Optimization

Track, analyze, and optimize your IT carbon footprint and public cloud costs.

Davis Anomaly Detection logo

Davis Anomaly Detection

Detect anomalies in timeseries using the Davis AI

Analyze your data

Understand your data better with deep insights and clear visualizations.

Notebooks logo

Notebooks

Create powerful, data-driven documents for custom analytics and collaboration.

Dashboards logo

Dashboards

Transform complex data into clear visualizations with custom dashboards.

Automate your processes

Turn data and answers into actions, securely, and at scale.

Workflows logo

Workflows

Automate tasks in your IT landscape, remediate problems, and visualize processes

Jira logo

Jira

Create, query, comment, transition, and resolve Jira tickets within workflows.

Slack logo

Slack

Automate Slack messaging for security incidents, attacks, remediation, and more.

Secure your cloud application

See vulnerabilities and attacks in your environment.

Security Overview logo

Security Overview

Get a comprehensive overview of the security of your applications.

Code-Level Vulnerabilities logo

Code-Level Vulnerabilities

Detect vulnerabilities in your code in real time.

Threats & Exploits logo

Threats & Exploits

Understand, triage, and investigate application security findings and alerts.

Are you looking for something different?

We have hundreds of apps, extensions, and other technologies to customize your environment

Leverage our newest innovations of Dynatrace Saas

Kick-start your app creation

Kick-start your app creation

Whether you’re a beginner or a pro, Dynatrace Developer has the tools and support you need to create incredible apps with minimal effort.
Go to Dynatrace Developer
Upgrading from Dynatrace Managed to SaaS

Upgrading from Dynatrace Managed to SaaS

Drive innovation, speed, and agility in your organization by seamlessly and securely upgrading.
Learn More
Log Management and Analytics

Log Management and Analytics

Innovate faster and more efficiently with unified log management and log analytics for actionable insights and automation.
Learn more