PingOne

Steps not yet verified in the identity provider's current admin console.

Recommended protocol: SAML 2.0.

SAML 2.0

Connect PingOne with SAML 2.0

This guide is not available in your language yet; it is shown in en.

  1. In the PingOne admin console go to Applications > Applications and click the plus icon next to the Applications heading.

    Applications page with the plus icon

  2. In Add Application enter an Application Name, select the SAML Application tile under Application Type and click Configure.

    Add Application with the SAML Application tile and Configure

  3. Under Provide Application Metadata select Manually Enter (or Import From URL with the KeenAuth metadata SP metadata URL). In ACS URLs enter ACS URL and in Entity ID enter SP entity ID, then click Save.

    SAML Configuration with Manually Enter, ACS URLs and Entity ID

  4. On the Configuration tab (pencil icon) set Subject NameId Format to persistent (the default is Not Specified) and keep Signing on Assertion with Signing Algorithm RSA_SHA256.

    Edit Configuration with the Subject NameID Format options

  5. On the Attributes tab add the SAML attributes email, firstName and lastName mapped to the PingOne user attributes Email Address, Given Name and Family Name (these exact names match the KeenAuth Ping profile), then Save.

    Attributes tab of the SAML application

  6. Turn on the application with the toggle at the top right of the details panel and assign access to your users.

    Application overview with the enable toggle and connection details

  7. Download the PingOne signing certificate or metadata and give it to KeenAuth, then run the connection test.

Values in bold are shown on the connection's page in the Admin Portal, where this guide has them filled in.