Configure SSO with PingIdentity

Adaptiva integrates with PingIdentity using the OpenID Connect (OIDC) protocol to provide single sign-on (SSO). In this setup, PingIdentity acts as the identity provider and manages user authentication, while Adaptiva relies on PingIdentity to validate user identities. This allows your users to login with their PingIdentity credentials adding an extra layer of security.

Below is a walkthrough on how to setup a relying party in PingIdentity and then use the generated information to setup an OIDC provider in the OneSite Platform

Create Environment in PingIdentity

After you have logged into your PingIdentity dashboard, you'll need to create a new Environment.

1. Click + next to Environments from the admin dashboard.

2. Choose Customer solution and continue through the wizard and follow any additional setup instructions for PingOne SSO.

   
3. Click Next.

4. Enter a Name and Description and select desired configurations from the Services section.

5. Click Finish.

Create an Application

Next you'll need to create the Adaptiva SSO application.

1. Click on the environment you just created and select Manage Environment

   
2. Select Applications > Applications from the side navigation.

3. Click the + button next to Applications.

   
4. Enter a Name and a Description.

5. Select SAML Application under Application Type.

6. Select Configure.

   
7. Select the Manually Enter radio button and enter the ACS URL in the following format:

   https://<adaptiva-server-FDQN:PORT>//api/v1.0/authentication/saml-login

   
8. Enter the Entity ID:

   https://<adaptiva-server-fdqn:PORT>

9. Click Save.

10. Select the Download Signing Certificate button under Connection Details and select the .crt format.

    • You will need this certificate later to complete the Create the SAML Provider in the Admin Portal steps below.

11. Select the Attribute Mappings tab.

12. Select the pencil edit icon and change the PingOne map to Email Address.

    

Create a User

You will need to create users to add to your group. To create a new user, please follow the steps in the PingOne - Adding a user documentation.

Create a Group

Next you will need to create a Group to add your users to, then add the Group to the SAML application. Please follow the steps in this guide on how to create a group PingOne - Create a group.

Add a group to your application

1. Select the Access tab and select the pencil edit icon and select the group you'd like to add and configure any desired settings.

   

Create the SAML Provider in the Admin Portal

Follow the steps on the Configure SAML and enter the following information from PingOne into the SAML Settings section below:

• Issuer ID - Enter the Issuer ID from PingIdentity.

• Authentication Request URI - Enter the Initiate Single Sign-on URL

• Attribute Consuming Service Index - leave blank.

• Name ID Format - Leave default.

• Public Key Info - Open the Signing Certificate you downloaded in a previous step in Notepad and copy and paste in this text box.

• Audience - Enter the Entity ID

  Adaptiva SAML settings view: