We are proud to share our inclusion in the 2024 Gartner Magic Quadrant for Data Integration Tools. We believe this recognition reflects the differentiated business outcomes CData delivers to our customers.
Get the Report →How to connect to PingOne Data from MS Excel on Mac OS X
Create a Data Source Name in iODBC with the CData ODBC Driver for PingOne and work with PingOne data in Microsoft Excel on Mac OS X.
Microsoft Excel features calculations, graphing tools, pivot tables, and a macro programming language that allows users to work with data in many of the ways that suit their needs, whether on a Windows machine or a Macintosh machine. This article walks through creating a DSN for PingOne data in iODBC and accessing PingOne data in Microsoft Excel, all on a machine running Mac OS X.
Installing the CData ODBC Drivers on Mac OS X
The CData ODBC Driver for PingOne is preconfigured for the iODBC driver manager, as are many other products like Microsoft Excel. This makes the driver easy to use with these tools.
Licensing the Driver
In a terminal run the following commands to license the driver. To activate a trial license, omit the key input.
cd "/Applications/CData ODBC Driver for PingOne/bin" sudo ./install-license <key>
Defining a DSN for iODBC with odbc.ini
You can define ODBC data sources in sections in the odbc.ini file. User data sources can only be accessed by the user account whose home folder the odbc.ini is located in. System data sources can be accessed by all users. You can find the correct odbc.ini in the following paths:
Privileges | Path | |
---|---|---|
User | /Users/myuser/Library/ODBC/odbc.ini | |
System | /Library/ODBC/odbc.ini |
Modifying iODBC's system-wide settings requires elevated permissions; to do so, you can use following to open a text editor from the terminal:
sudo nano /Library/ODBC/odbc.ini
To connect to PingOne, configure these properties:
- Region: The region where the data for your PingOne organization is being hosted.
- AuthScheme: The type of authentication to use when connecting to PingOne.
- Either WorkerAppEnvironmentId (required when using the default PingOne domain) or AuthorizationServerURL, configured as described below.
Configuring WorkerAppEnvironmentId
WorkerAppEnvironmentId is the ID of the PingOne environment in which your Worker application resides. This parameter is used only when the environment is using the default PingOne domain (auth.pingone). It is configured after you have created the custom OAuth application you will use to authenticate to PingOne, as described in Creating a Custom OAuth Application in the Help documentation.
First, find the value for this property:
- From the home page of your PingOne organization, move to the navigation sidebar and click Environments.
- Find the environment in which you have created your custom OAuth/Worker application (usually Administrators), and click Manage Environment. The environment's home page displays.
- In the environment's home page navigation sidebar, click Applications.
- Find your OAuth or Worker application details in the list.
-
Copy the value in the Environment ID field.
It should look similar to:
WorkerAppEnvironmentId='11e96fc7-aa4d-4a60-8196-9acf91424eca'
Now set WorkerAppEnvironmentId to the value of the Environment ID field.
Configuring AuthorizationServerURL
AuthorizationServerURL is the base URL of the PingOne authorization server for the environment where your application is located. This property is only used when you have set up a custom domain for the environment, as described in the PingOne platform API documentation. See Custom Domains.
Authenticating to PingOne with OAuth
PingOne supports both OAuth and OAuthClient authentication. In addition to performing the configuration steps described above, there are two more steps to complete to support OAuth or OAuthCliet authentication:
- Create and configure a custom OAuth application, as described in Creating a Custom OAuth Application in the Help documentation.
- To ensure that the driver can access the entities in Data Model, confirm that you have configured the correct roles for the admin user/worker application you will be using, as described in Administrator Roles in the Help documentation.
- Set the appropriate properties for the authscheme and authflow of your choice, as described in the following subsections.
OAuth (Authorization Code grant)
Set AuthScheme to OAuth.
Desktop Applications
Get and Refresh the OAuth Access Token
After setting the following, you are ready to connect:
- InitiateOAuth: GETANDREFRESH. To avoid the need to repeat the OAuth exchange and manually setting the OAuthAccessToken each time you connect, use InitiateOAuth.
- OAuthClientId: The Client ID you obtained when you created your custom OAuth application.
- OAuthClientSecret: The Client Secret you obtained when you created your custom OAuth application.
- CallbackURL: The redirect URI you defined when you registered your custom OAuth application. For example: https://localhost:3333
When you connect, the driver opens PingOne's OAuth endpoint in your default browser. Log in and grant permissions to the application. The driver then completes the OAuth process:
- The driver obtains an access token from PingOne and uses it to request data.
- The OAuth values are saved in the location specified in OAuthSettingsLocation, to be persisted across connections.
The driver refreshes the access token automatically when it expires.
For other OAuth methods, including Web Applications, Headless Machines, or Client Credentials Grant, refer to the Help documentation.
When you configure the DSN, you may also want to set the Max Rows connection property. This will limit the number of rows returned, which is especially helpful for improving performance when designing reports and visualizations.
In addition to the connection properties required to connect to PingOne, the Driver property specifies either a driver definition in the odbcinst.ini file or the path to the driver library. Place your connection properties at the beginning of odbc.ini:
[CData PingOne Sources] Driver = CData ODBC Driver for PingOne AuthScheme = OAuth WorkerAppEnvironmentId = eebc33a8-xxxx-4f3a-yyyy-d3e5262fd49e Region = NA OAuthClientId = client_id OAuthClientSecret = client_secret
If you wish to authenticate using OAuth, you will need to add an additional connection property to ensure that the OAuth flow can execute properly:
Other = CheckPromptMode=False
Mac OS validates our drivers separately so you need to copy the license file to the appropriate path as well. After you have configured odbc.ini, run the following command.
sudo cp /Applications/CData ODBC Driver for PingOne/lib/CData.ODBC.PingOne.lic /Users/<YOUR_USER>/Library/Containers/com.microsoft.Excel/Data/.cdata/
Additionally, in the ODBC Data Sources section, the DSN must be set to a driver defined in the odbcinst.ini file. For example, below is the entry for the DSN created during the driver install:
[ODBC Data Sources]
CData PingOne Source = CData ODBC Driver for PingOne
Registering a DSN for iODBC with odbcinst.ini
You may need to modify the installed driver definition if you change the path to the driver library. To register an ODBC driver, modify the odbcinst.ini file. With iODBC, drivers can be available to only one user account or drivers can be available system wide. You can find the correct odbcinst.ini in the following paths:
Privileges | Path | |
---|---|---|
User | /Users/myuser/Library/ODBC/odbcinst.ini | |
System | /Library/ODBC/odbcinst.ini |
Drivers are defined in sections in the odbcinst.ini file. The section name specifies the name of the driver. In this section, the Driver property specifies the path to the driver library. The driver library is the .dylib file located in the lib subfolder of the installation directory, by default in /Applications/CData ODBC Driver for PingOne.
[CData ODBC Driver for PingOne]
Driver = /Applications/CData ODBC Driver for PingOne/lib/libpingone.odbc.dylib
The ODBC Drivers section must also contain a property with the driver name, set to "Installed".
[ODBC Drivers]
CData ODBC Driver for PingOne = Installed
Testing the Connection
You can test your connection using the iODBC administrator.
- Open a terminal and enter the following command to start the iODBC Administrator with the necessary permissions:
sudo /Applications/iODBC/iODBC\ Administrator64.app/Contents/MacOS/iODBC\ Administrator64
- On the Users tab, select CData PingOne Source.
- Click the Test button.
Accessing PingOne Data from Microsoft Excel
You can use the DSN configured above to access PingOne data from Microsoft Excel.
- Open Microsoft Excel and open a spreadsheet (new or existing).
- Navigate to the data ribbon, click the drop down next to "Get Data (Power Query)," and select "From Database (Microsoft Query)"
- Select the User or System DSN that you previously configured and click OK.
- Build your SQL query in the Microsoft Query wizard:
- Click Return Data to execute the query and pull data into Excel.

Using the CData ODBC Driver for PingOne, you can easily pull your PingOne data directly into Excel. Once there, you can leverage all of the powerful features native to Excel to analyze, report, transform your PingOne data, and more!