New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Ping Identity PAP-001 Exam - Topic 7 Question 4 Discussion

Actual exam question for Ping Identity's PAP-001 exam
Question #: 4
Topic #: 7
[All PAP-001 Questions]

A protected web application requires that additional attributes be provided once the user is authenticated. Which two steps must the administrator perform to meet this requirement? (Choose 2 answers.)

Show Suggested Answer Hide Answer
Suggested Answer: B, E

When applications require additional attributes:

The Web Session must be configured to retrieve those attributes from the token provider (OIDC or PingFederate).

The Identity Mapping must be updated to forward those attributes to the application (e.g., as headers).

Exact Extract:

''Web sessions define how user attributes are retrieved from the token provider. Identity mappings determine how those attributes are inserted into requests to applications.''

Option A is not necessarily required; attributes can be retrieved via userinfo endpoint or access token, not only ID tokens.

Option B is correct --- Identity Mappings must be updated to pass attributes to the app.

Option C is incorrect --- Site Authenticators define how PingAccess authenticates to apps, not attribute handling.

Option D is incorrect unless the architecture specifically requires access token updates; PingAccess often uses the Web Session to fetch attributes.

Option E is correct --- Web Session must be updated to retrieve additional attributes.


Contribute your Thoughts:

0/2000 characters
Fannie
9 hours ago
Right, we need the tokens updated first.
upvoted 0 times
...
Billye
6 days ago
True, but it’s not directly related to attributes.
upvoted 0 times
...
Skye
11 days ago
What about B? Updating Identity Mapping could help.
upvoted 0 times
...
Talia
16 days ago
D is crucial for access tokens too.
upvoted 0 times
...
Fannie
21 days ago
Agreed! A makes sense for ID tokens.
upvoted 0 times
...
Marta
26 days ago
I’m surprised this isn't more straightforward!
upvoted 0 times
...
Dorcas
1 month ago
Definitely A and D, no doubt about it!
upvoted 0 times
...
Isreal
1 month ago
Wait, why would we need to update the access token?
upvoted 0 times
...
Ronnie
1 month ago
I think B is also important, though.
upvoted 0 times
...
Solange
2 months ago
A and D are the right choices!
upvoted 0 times
...
Whitley
2 months ago
I feel like updating the Identity Mapping might be relevant here, but I can't recall the specifics.
upvoted 0 times
...
Krissy
2 months ago
I remember practicing a question similar to this, and I think updating the access token could be important too.
upvoted 0 times
...
Billye
2 months ago
I think A and D are the best choices.
upvoted 0 times
...
Pamela
2 months ago
I'm going to go with A and C, just to keep things interesting.
upvoted 0 times
...
Carolynn
2 months ago
I think we might need to request the token provider to update the ID token with the additional attributes, but I'm not entirely sure about the second step.
upvoted 0 times
...
Skye
3 months ago
I feel confident about this question now.
upvoted 0 times
...
Samira
3 months ago
I'm leaning towards updating the Web Session as one of the steps, but I need to double-check if that's the right approach.
upvoted 0 times
...
Serita
3 months ago
Haha, I bet the answer involves updating something. That's always the solution, right?
upvoted 0 times
...
Marjory
3 months ago
D and E seem like the best options to me.
upvoted 0 times
...
Rosina
4 months ago
I think A and B are the right choices.
upvoted 0 times
...
Pok
4 months ago
A and D are the correct answers.
upvoted 0 times
...
Jesus
4 months ago
This one's straightforward. The two steps are to request that the token provider update the ID token, and to update the identity mapping.
upvoted 0 times
...
Iola
4 months ago
Ah, I see what they're getting at here. We need to request that the token provider update the ID token, and we also need to update the identity mapping to include the new attributes.
upvoted 0 times
...
Alysa
4 months ago
Okay, let me think this through. I'm pretty sure we need to request that the token provider update the ID token with the additional attributes. And I think we also need to update the identity mapping.
upvoted 0 times
...
William
4 months ago
Hmm, this seems like it could be tricky. I'm thinking it might involve updating the token provider to include the additional attributes, but I'm not 100% sure.
upvoted 0 times
...
Kristofer
5 months ago
I'm not totally sure about this one. I think it might involve updating the identity mapping or the token provider, but I'm not confident.
upvoted 0 times
...

Save Cancel