Single Sign-On for Ping Identity

[Scott_Robinson]

Single Sign-On (SSO) allows you to sign in to Bluescape from a centralized identity provider (IDP), simplifying user experience and management. Bluescape supports SSO through IDPs using the SAML 2.0 standard.

How to Set Up SSO For Ping Identity

The following instructions are for setting up PingOne, and the cloud-based SSO service put out by Ping Identity.

1. Log in to the PingOne homepage.
2. On the PingOne dashboard that opens, select the Applications link in the top menu bar.
    
   
    
3. On the My Applications screen that appears, select the Add Application button.
    
   
    
   Note: If the option to add a new SAML app is disabled, see the Ping support article entitled, Why is adding a new SAML app disabled?
4. In the dropdown list that appears below the button, select the New SAML Application option.
    
   
    
5. In the Application Details field that opens, enter a name for the application and an application description (optional).
6. In the Category field, select the category that best suits the application.
7. Select the Continue to Next Step button.
    
   
    
8. On the Application Configuration screen, complete the fields listed below. You should have received the values for each field from your Bluescape Support Engineer.
   • Assertion Consumer Service (ACS)
   • Entity ID
   • Application URL
   • Single Logout Endpoint
   • Single Logout Response Endpoint
      
     
      
9. Select the Continue to Next Step button.
10. On the SSO Attribute Mapping screen, select the Add new attribute button.
     
    
    
    
     
11. Add the following four attributes:

Application Attribute	Identity Bridge Attribute or Literal Value
User.FirstName	First Name
User.LastName	Last Name
User.Email	Email
user_guid	Refer to the Ping documentation for the recommended value that should be used.**

Note: If you choose to use a value other than the one recommended by Ping, the value must be unique for each user and unchangeable, even if the user’s email changes.

12. Select the Continue to Next Step button.
13. The My Applications screen appears, showing all of the details for the new app.
     
    
    
    
     
14. In the SAML Metadata field, select the Download button, then specify the location on your computer where you want to download the app metadata.
15. Send the metadata file to your Bluescape Support Engineer so that it can be hosted in the Bluescape system.
     
    Note: Bluescape requires all X509 Certificate fields in metadata files to be free of all spaces and carriage returns.
     
16. The application setup process is complete when the file is hosted.

Where to Next?

• Setting Up Single Sign-On

Not what you were looking for? Reply below or Search the community and discover more Bluescape.