Questions tagged [pingfederate]

PingFederate from Ping Identity is cloud identity management software for Single Sign-On, secure mobile access, automated user provisioning and API security.

PingFederate from Ping Identity is cloud identity management software for Single Sign-On (SSO), secure mobile access, automated user provisioning and API security. It features a lightweight, open architecture that implements several federation and API security standards, namely: SAML, OAuth, WS-Federation, WS-Trust, SCIM and OpenID Connect.

309 questions
3
votes
1 answer

Difference between jwt-bearer and token-exchange grant types

What are the main differences between grant types "urn:ietf:params:oauth:grant-type:jwt-bearer (https://www.rfc-editor.org/rfc/rfc7523) and "urn:ietf:params:oauth:grant-type:token-exchange" (https://www.rfc-editor.org/rfc/rfc8693).
Paul
  • 159
  • 2
  • 9
3
votes
1 answer

How to provide selective access for lambda execution to a federated user in AWS IAM policy?

I am trying to give lambda execution access to select members within a group. Users are authenticated via PingFederate. I am having issue granting this selective access to federated user. I have a custom IAM policy…
3
votes
1 answer

PingFederate RelayState with IdP-initiated SSO

When initiating login Keycloak sends a relaystate parameter in request. However after successful login PingFederate does not return this relaystate. Weird thing is if I add a TARGET parameter to the PingFederate request URL, it will return the…
tryingToLearn
  • 10,691
  • 12
  • 80
  • 114
3
votes
1 answer

Difference between PingFederate SSO Application Endpoint and SSO Service Location

I have configured IDP initiated SSO in PingFederate and it shows SSO Application Endpoint as: https://myserver/idp/startSSO.ping?PartnerSpId=sp_id But when I download the metadata for this SP connection, in metadata the SSO Service Location is shown…
tryingToLearn
  • 10,691
  • 12
  • 80
  • 114
3
votes
1 answer

Why does a PingFederate IdP connection require a SP adapter?

I have read the PingFederate documentation and it says: An SP adapter is used to create a local-application session for a user in order for PingFederate® to provide SSO access to your applications or other protected resources. You must…
Euklides
  • 564
  • 1
  • 10
  • 35
3
votes
2 answers

What configuration to do in IDP to initiate SLO and how to consume IDP initiated SLO response in SP using SAML 2.0

We build the SSO in my application for login using SAML 2.0. Here I want to build IDP initiated SLO for logout. Question 1. What configuration we need to do in IDP to initiate SLO? How to consume IDP initiated SLO response in SP using SAML…
3
votes
1 answer

PingFederate OpenToken Sample Application

I'm trying out the sample applications provided together with the PingFederate .NET Integration Kit. I was able to make it work for the Single Server set-up (my machine served as both the IdP and the SP). But when I tried setting up two machines…
Jude
  • 545
  • 3
  • 20
3
votes
2 answers

Does PingFederate and ADFS support ECP (Enhanced Client and Proxy) Profile?

Does PingFederate and ADFS support SAML ECP (Enhanced Client and Proxy) Profile? If yes, is there any documentation?
Michael
  • 161
  • 2
  • 13
3
votes
1 answer

Ping Federate : Single sign-on authentication was unsuccessful

I am getting this issue while implementing Ping Federate Error - Single Sign-On Single sign-on authentication was unsuccessful (reference # TAELHKAD). Please contact your system administrator for assistance regarding this error. Partner:…
Runcorn
  • 5,144
  • 5
  • 34
  • 52
3
votes
1 answer

Ping Federate IDP-SP Implementation

I am a newbie on PingFederate. Able to setup PingFederate locally. I just got another thought. Suppose i am setting up PingFederate as SP. Now the other party(IDP) will send me SAML only. I guess since there is no PingFederate at IDP side, there is…
Bonny M
  • 43
  • 1
  • 4
2
votes
1 answer

PingFederate SLO: No Logout Service is Configured for this Adapter

After I invoke single-log-out (SLO), by calling 'GET' on https://[PingFederate Server Instance]:[Port]/idp/startSLO.ping, my PingFederate server begins making requests to my SP logout services. [I know this because I can see it happening in…
Jim G.
  • 15,141
  • 22
  • 103
  • 166
2
votes
0 answers

spring security - sending http request instead of https

We are facing the below issues with spring security; spring boot version is 2.3.1 and the component is behind the nginx. The LB url to nginx is Https and from nginx to other components are HTTP. The request to pingfed from the spring security…
user3474541
  • 157
  • 3
  • 13
2
votes
2 answers

Angular Get http response header without any WebAPI call?

I have a login authorization module that is installed on my sql server. The module is triggered from my web.config file in my wwwroot directory. In normal use case I connect to my…
Terrance Jackson
  • 606
  • 3
  • 13
  • 40
2
votes
1 answer

unable to get power bi access token asp.net mvc with ping federate authentication

I have an web app with ping federate authentication. Now I want to integrate power bi embedded into it. But I was unable to get access token from power bi, because my client has third party authentication like ping federate for power bi.
N.Siva
  • 66
  • 5
2
votes
2 answers

ASP .NET Core 2.0 - OpenId Connect Auth : Correlation error

I am trying to create an authentication on an ASP.NET Core 2.0 web app. My company is using Ping Federate and I am trying to authenticate my users using the company login page and in return validating the returned token using my signing key…
parphane
  • 152
  • 2
  • 12
1
2
3
20 21