# PingFederate

Steps not yet verified in the identity provider's current admin console.

Recommended protocol: SAML 2.0.

## SAML 2.0

### Connect PingFederate with SAML 2.0

1. In the PingFederate admin console go to Applications \> Integration \> SP Connections and click Create Connection.
2. Choose Do not use a template, tick Browser SSO Profiles and keep protocol SAML 2.0.
3. Import the KeenAuth metadata from **SP metadata URL** (file, URL or manual) and check that Entity ID is **SP entity ID**.
4. Under Configure Browser SSO enable IdP-Initiated and SP-Initiated SSO, set identity mapping to Standard and map SAML\_SUBJECT from the adapter (mail or uid).
5. In Protocol Settings confirm the ACS URL **ACS URL**, allow the POST binding and select Always Sign the SAML Assertion.
6. Under Credentials select the signing certificate, activate the connection and save; export the PingFederate metadata and upload it in KeenAuth.

Values in bold are shown on the connection's page in the Admin Portal, where this guide has them filled in.