PingFederate

Steps not yet verified in the identity provider's current admin console.

Recommended protocol: SAML 2.0.

SAML 2.0

Connect PingFederate with SAML 2.0

1. In the PingFederate admin console go to Applications > Integration > SP Connections and click Create Connection.
2. Choose Do not use a template, tick Browser SSO Profiles and keep protocol SAML 2.0.
3. Import the KeenAuth metadata from SP metadata URL (file, URL or manual) and check that Entity ID is SP entity ID.
4. Under Configure Browser SSO enable IdP-Initiated and SP-Initiated SSO, set identity mapping to Standard and map SAML_SUBJECT from the adapter (mail or uid).
5. In Protocol Settings confirm the ACS URL ACS URL, allow the POST binding and select Always Sign the SAML Assertion.
6. Under Credentials select the signing certificate, activate the connection and save; export the PingFederate metadata and upload it in KeenAuth.

Values in bold are shown on the connection's page in the Admin Portal, where this guide has them filled in.