p1az-import-generator

Generate PingOne Authorize snapshot import files from plain-language authorization rules.

1|Updated Jun 25, 2026
One-click install
npx skills add https://github.com/curtismu7/AI-DEMO2 --skill p1az-import-generator-curtismu7
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: p1az-import-generator
Source: https://github.com/curtismu7/AI-DEMO2/tree/main/.claude/skills/p1az-import-generator
Command: npx skills add https://github.com/curtismu7/AI-DEMO2 --skill p1az-import-generator-curtismu7

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? PingOne Authorize has no API for authoring policy logic, so policies must be built by importing a snapshot file through the admin console. This Skill converts plain-language authorization rules (e.g. "deny if amount over 2000", "require step-up MFA over 500") into a valid snapshot JSON file matching PingOne's export/import schema, avoiding malformed imports and INDETERMINATE decisions. ## Core Features & Use Cases - Rule-to-Snapshot Generation: Turns natural-language rules into a complete snapshot file with attributes, conditions, statements, rules, a policy, and a policy set in the correct assembly order. - Fail-Safe Defaults: Enforces attribute default values and a catch-all permit rule so decisions resolve to PERMIT/DENY instead of INDETERMINATE. - Outcome Modeling: Distinguishes hard DENY rules from PERMIT-with-obligation rules (step-up MFA, HITL/consent) with machine-readable statement codes for the calling application. - Use Case: A developer needs a transaction authorization policy in PingOne Authorize that denies amounts over 2000, requires step-up MFA over 500, and permits otherwise — the Skill produces the ready-to-import JSON file. ## Quick Start Ask the assistant to generate a PingOne Authorize import file from your rules, for example: "Create a P1AZ policy that denies transactions over 2000, requires step-up MFA over 500, and permits everything else."

Frequently Asked Questions about p1az-import-generator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a PingOne Authorize policy from plain-language rules?▼

Describe your rules in plain language, including fields, thresholds, and outcomes. The Skill generates a snapshot JSON file you import via the PingOne Admin Console under Authorization, using the policy editor's kebab menu Import option.

Can I create PingOne Authorize policies through an API?▼

No. PingOne Authorize has no API for authoring policy logic, and the policy-editor endpoints reject client-credentials worker tokens. Importing a snapshot file through the admin console is the only route.

Why does my PingOne Authorize decision return INDETERMINATE?▼

INDETERMINATE usually means a rule read an attribute with no defaultValue that the caller omitted, or the policy lacks a catch-all rule with condition {"empty": {}}. The generated file sets fail-safe defaults and always includes exactly one catch-all rule.

What is the difference between a deny rule and a step-up obligation in PingOne Authorize?▼

A hard deny uses a statement with appliesTo DENY and conditionalDenyElsePermit effect settings. A step-up or consent obligation uses a PERMIT statement with a machine-readable code like step_up_required, which the calling application reads to prompt for MFA.

Can I reuse IDs from an existing PingOne snapshot export?▼

No. Importing an existing ID updates that object in place rather than creating a new one. The Skill generates a fresh random UUID for every object's id and version so each import creates distinct objects.