PingOne

Adding an application from the application catalog

Use the PingOne application catalog to configure single sign-on (SSO) for popular applications.

Steps

  1. In PingOne admin console, go to Applications > Application Catalog and browse or search for applications.

  2. Click the application entry to open the details panel.

  3. For Quick Setup, enter the following information:

    • To change the application name, enter a new name in the Name field.

      The application name must be unique, and cannot be the same as any applications configured at Applications > Applications.

    • To change the icon for the application, click the icon image and select a new file.

      Some applications require additional configuration inputs, such as AccountID, Domain Name, or Vanity URL.

  4. Click Next.

  5. For Map Attributes, set up user attribute mapping from the application to PingOne.

    The required attributes for each application are pre-populated. In most cases, you won’t need to alter the mappings.

    Required attributes must be mapped before you can proceed to the next configuration tab.

    Choose from:

    • To change the attribute mapping, enter or select a new attribute in the PingOne Mappings list.

    • To designate the attribute as required, select the Required checkbox.

    • To use the expression builder or map the attribute to a literal string value, click the Gear icon. Learn more in Using the expression builder.

    • To delete an attribute mapping, click the Delete icon.

  6. (Optional) To add a new attribute:

    1. Click Add.

    2. In the application field for the new attribute, enter the name of the attribute as it appears in the application.

    3. In the PingOne Mappings field for the new attribute, enter or select the PingOne attribute to map to.

      To use the expression builder or map the attribute to a literal string value, click the Gear icon. Learn more in Using the expression builder.

  7. When you’re finished mapping attributes, click Next.

  8. For Select Groups, specify the groups that you want to have access to the application.

    By default, all users have access to the application. Assigning groups restricts application access to only those groups.

    Learn more in Groups.

  9. Click Save.

    Result:

    The application is now configured for PingOne. There may be additional configuration necessary on the application side.

  10. To see applications that have already been configured, click the Configured tab.

  11. On the Overview tab, download or copy information required by the application to complete the SSO configuration.

    This information includes the following PingOne details:

    • Metadata

    • Signing certificate

    • Issuer ID URL

    • Initiate Single Sign-on URL

    • Single Signon Service URL

    • IdP Metadata URL

Next steps

After you configure the application, you can manage it from Applications > Applications.

To configure advanced application settings, go to the Configuration tab for the application to see all application settings, including but are not limited to:

  • ACS URLs: The Assertion Consumer Service URLs.

  • Signing key: The certificate that confirms that requests, responses, and assertions actually came from the application.

  • Entity ID: The service provider (SP) entity ID used to look up the application.

  • SLO endpoint: The SAML single logout endpoint URL.

  • Subject NameID format: A string that specifies the format of the Subject NameID attribute in the SAML assertion.

Learn more about advanced settings in Editing an application.