The Core Token Service (CTS) can be used for storing which of the following?

The Core Token Service (CTS) is a foundational component in PingAM designed for high-availability storage of security tokens and session data. Its primary function is to persist OAuth 2.0 tokens (access, refresh), OpenID Connect tokens, and user session tokens in a centralized data store, typically PingDirectory. This enables token validation, introspection, and revocation across a distributed PingAM cluster, ensuring state consistency and supporting stateless clients.

A. Configuration data for PingAM services, realms, and policies is stored in a dedicated configuration store, not the CTS.

B. User profiles and identity data are managed in a user data store, which is distinct from the CTS token store.

C. While Kerberos is an authentication mechanism, the CTS is not designed for storing Kerberos service tickets; its focus is on session and OAuth2/OIDC tokens.

1. Ping Identity, PingAM 7.3 Documentation, "Core Token Service (CTS)," Section: "About the CTS". (Describes CTS storing sessions and OAuth 2.0/OIDC tokens).

2. Ping Identity, PingAM 7.3 Documentation, "OAuth 2.0 Guide," Chapter: "Configuring OAuth 2.0," Section: "Configuring the CTS for OAuth 2.0 Tokens". (Details the requirement of CTS for persisting OAuth 2.0 tokens).