Ping One | SAML

Owned by Ole Kristian Aune (Unlicensed)
Last updated: Dec 21, 2023 by Mari Fuglem
3 min read

1. Display name

Choose a name for your identity provider. This is the user-facing name, so choose a name your users will recognize. This can be changed later.

 

2. Redirect Mode

Select how the user will be redirected to the identity provider. You may configure more redirect modes after completing the setup.

 

3. Prepare IDP

Copy and save the Reply URL for later. You will need this when configuring Ping One

 

Configure PingOne

EXTERNAL

If you are using SCIM with your provider, make sure to check out the documentation for configuring this before proceeding. It might be that you need to configure this first or at the same time as setting up SAML.

Login to https://admin.pingone.com

Go to Applications in the menu and click Add Application and choose New SAML Application.

Fill in the required fields with appropriate values and click Continue to Next Step

 

Paste the Reply URL from the KSSO wizard into the Assertion Consumer Service (ACS) and Entity ID fields, and proceed to next step.

 

Then add the following attributes to the SSO Attribute Mapping list:

  • givenName with value fname

  • surname with value lname

  • email with value email

Click Save & Exit.

On the Review Setup page, download the SAML metadata file for your application:

Next, assign your application to User Group(s). Navigate to the Users tab, then User Groups.

Click Edit on the group you want to assign the application to and check the box related to your created application. Save your changes.

 

 

Go back to the Kantega SSO setup wizard.

4. Metadata

Choose Upload metadata XML file.

Browse and upload the SAML metadata file you downloaded from PingOne.

 

5. Redirect URL

No need to do anything. The Redirect URL is automatically fetched from the metadata you imported in the previous step.

 

6. Certificate

This step shows the certificate used to validate the SAML messages.

 

7. Summary

Check that everything looks good and submit your setup

 

Test

Test that the log in with Ping One works as expected. This will help identify if there are any issues with the configuration. Follow the steps to perform the login test.