PingOne for Enterprise identity provider

Set up single sign-on (SSO) for Cloud Management Platform (CMP) using PingOne for Enterprise

  3 minute read  

Before you begin

  • Create at least one branded portal for this SSO provider. Its URL determines the metadata and ACS URL.
  • Have an administrator account in PingOne for Enterprise that can create an application and add users.
  • Have a PingOne organization.

Set up PingOne in CMP

  1. In CMP, log in as an administrator.
  2. Select Admin > Single Sign-On (SSO).
  3. Select Add > Generic SAML Provider.
  4. Complete the SAML settings form, selecting the branded portal for this provider.
  5. Select Create.
  6. Copy and store the Single Sign-On URL and Metadata URL / Entity ID, and select Download Metadata XML. You use these later during PingOne setup.

Create the PingOne application

Connect to the PingOne directory

  1. Log in to the PingOne for Enterprise web interface.
  2. In the top navigation menu, select Setup > Identity Repository > Connect to an Identity Repository.
    1. For Connect to an Identity Repository, select PingOne Directory, then select Next.
    2. After the directory is configured, select Next.
    3. Make note of the Map Attributes; you use them later.
  3. Select Finished.

Add the PingOne SAML application

  1. In the top navigation menu, select Applications > Add Application > Search Application Catalog.

  2. Search for “Ping”, then select the arrow next to Ping IDaaS Directory Provisioner > Setup.

    Screenshot: search for “Ping”, then select the arrow next to Ping IDaaS Directory Provisioner > Setup

Selecting Setup opens PingOne’s configuration wizard. Complete each step:

SSO Instructions

  1. Download the signing certificate.
  2. Copy and store the IDs, URL, and issuer for later use.
  3. Select Continue to Next Step.

Screenshot: select Continue to Next Step

Connection Configuration

  1. Upload the Metadata URL you collected in Set up PingOne in CMP, step 6. The ACS URL and Entity ID fields populate from the metadata and should match your SSO provider in CMP.
  2. Select Continue to Next Step.

PingOne App Customization

  1. Optionally, change the PingOne app icon, name, description, and category.
  2. Select Continue to Next Step.

Group Access

  1. If you have groups, add them here.
  2. Select Continue to Next Step.

Review Setup

  1. Review the presented information.
  2. Copy and store the Initiate Single Sign-On (SSO) URL. You need it to test the connection later.
  3. Download the Signing Certificate and SAML Metadata.
  4. Select Finish.

Screenshot: select Finish

Upload the metadata to CMP

Return to your PingOne SSO provider in CMP to upload the XML metadata.

  1. In your PingOne SSO provider, select Upload IdP XML.
    • Metadata Source: Metadata file
    • Metadata File: Select the file you downloaded in the Review Setup step.
  2. To upload certificates, select Certificates.

Test the SSO connection

  1. In CMP, select Admin > Users and create a new user. Make sure the user’s group membership matches any group entered in PingOne setup.
  2. Go to the Initiate Single Sign-On (SSO) URL and log in with the new user account.
  3. If you are redirected to CMP and can log in, the SSO configuration is complete.