Create an SSO Application in Ping

To use Ping as your identity provider while using single sign-on, configure the correct settings for your app integration.

1. Open the Ping application.
2. Go to Applications and select Applications from the sidebar.
3. Click the + sign next to Applications.
4. In the Add Application screen, enter the Application Name and Description.
5. Under Application Type, select SAML Application.
6. Click Configure.
7. Under SAML Configuration, select Manually Enter.
8. In the ACS URLs field, enter any URL (it will be replaced with the correct parameter later on).
9. Enter any value in the Entity ID field.
10. Click Save.
11. Navigate to the newly created application's Configuration tab.
12. Click Download Signing Certificate. Download the certificate as a .pem file.
13. Sometimes the file will save as a .crt. Manually replace the extension with .pem.
14. In the Own Data Platform, paste the Issuer ID into the Identity Provider Issuer field, upload the certificate.
15. (Optional) To enable SP-Initiated sign in, enable the SP-Initiated checkbox, copy the Initiate Single Sign-On (SSO) URL value from Ping and paste it into the IdP SSO URL field.
16. Click Next. It may take a few minutes to verify your settings.
17. Once your settings are verified, the IdP Parameters will be displayed.
18. In Ping, open the app you created and open the Configuration tab. Click the Edit icon and scroll down to SAML Settings.
19. Enter the IdP Parameters from the Own Data Platform in the corresponding fields:

    Parameter in Own	Parameter in Ping
    Audience URI (SP Entity ID)	Entity ID
    Single Sign-On URL	ACS URLs
    Default RelayState	Application URL (This field only appears when the SSO application is in edit mode.)

20. Select emailAddress as the Subject NameID format.
21. Click Save.