Questions tagged [pingfederate]

PingFederate from Ping Identity is cloud identity management software for Single Sign-On, secure mobile access, automated user provisioning and API security.

PingFederate from Ping Identity is cloud identity management software for Single Sign-On (SSO), secure mobile access, automated user provisioning and API security. It features a lightweight, open architecture that implements several federation and API security standards, namely: SAML, OAuth, WS-Federation, WS-Trust, SCIM and OpenID Connect.

309 questions
8
votes
1 answer

IdentityServer4 Correlation Failed Error with External Provider

I am attempting to integrate Ping Federate as an external OIDC provider for my IdentityServer4 instance. When I initiate the external login flow I am getting the following error: System.Exception: Correlation failed. at…
Ryan Mendoza
  • 920
  • 1
  • 13
  • 27
7
votes
1 answer

PingFederate IdP-initiated Logout, redirect to TargetResource

Ping Federate Logout From IdP flow as from the Ping Federate Documentation Sequence User initiates a single logout request. The request targets the PingFederate server’s /idp/startSLO.ping endpoint. PingFederate sends a logout request and receives…
Runcorn
  • 5,144
  • 5
  • 34
  • 52
6
votes
0 answers

How to get new or refresh access token with wsfed for .net core?

I am using wsfederation(with pingfederate as IDP) for authenticating. This is working fine for getting access token first time, but when the token got expired, I need to get a new token or refresh token. In .NET framework 4.7.2 it is working fine as…
Diboliya
  • 1,124
  • 3
  • 15
  • 38
6
votes
1 answer

How to revoke an Access Token with PingFederate

Is there any endpoint on PingFederate (version 7.1.3.1), that we can use to revoke an OAuth Access Token?
Freelander
  • 129
  • 1
  • 2
  • 6
5
votes
1 answer

PingFederate Single Log-Off - How does it work?

Given: PingFederate is a single-sign-on (SSO) solution, which allows users to be authenticated by 1-n applications using a single username and password. High-Level Questions: How does PingFederate's single-log-off (SLO) feature work? And how does…
Jim G.
  • 15,141
  • 22
  • 103
  • 166
5
votes
3 answers

PingFederate and NGinx integration and deployment options

Some time before we started to look how to integrate PingFederate into our infrastructure. Our initial use case is following: we are providing multy tenant access to our application and different companies might use different(their) Identity…
user1459144
  • 4,439
  • 5
  • 28
  • 35
5
votes
1 answer

ASP.NET MVC how to use pingfederate (OpenTokenAdapter) for SP Initiated SSO?

Intention to ask this question is how to integrate ping in ASP.NET MVC application i.e. Service provider? We have two idps (Identity Providers) and we have to implement service provider initiated SSO. Let me know incase more details are required.
Shailesh
  • 1,178
  • 11
  • 12
4
votes
1 answer

Run a Spring Boot oAuth2 application as resource server AND serving web content

I'm using Spring Boot 1.5.13 and with that Spring Security 4.2.6 and Spring Security oAuth2 2.0.15. I want to find a best practice setup for our Spring Boot applications that serve a mixed set of content: A REST API, and some web pages that provide…
4
votes
1 answer

Creating SAML protocol sign-in request programatically with .net libraries

I have implemented Asp.net website which acts as relying party. Currently it supports WS-federation protocol for SSO. It uses “WSFederationAuthenticationModule” class to create a request and sends it to ADFS. It also verifies the SAML response with…
Amey
  • 1,216
  • 18
  • 28
4
votes
1 answer

How can I determine if a user is still logged in using the PingFederate OpenID Connect Implicit Client flow?

Given the scenario where a user has logged into my application using the implicit client flow for OpenID Connect where the OP is PingFederate, how can I determine if the user is still logged in if they have closed the application and come back to it…
Kyle Hayes
  • 5,225
  • 8
  • 38
  • 53
4
votes
1 answer

PingFederate x509 adapter

according to installation guidelines x509 adapter requires secondary HTTPS port to be specified. Could someone explain why it is required? In case PingFed is behind the load-balancer, should secondary port be configured in LB too? Does it require…
shatl
  • 911
  • 16
  • 21
4
votes
1 answer

Configuring Spring SAML for SSO with PingFederate

We have decided to use Ping Federate to be our SSO solution. I have searched many examples but have not found a spring configuration that clearly describes how I need to set up my SP and/or IdP on the PingFederate side. I have not found a Spring…
4
votes
2 answers

Is there a PingFederate metadata URL?

In PingFederate, I know that we can export the metadata as a XML file, but is there an URL that I can call to access it? OpenAM and ADFS seem to have such functionality,…
Michael
  • 161
  • 2
  • 13
4
votes
2 answers

SAML 2.0 assertion response URL for Ping Federate 6.1 service provider

A supplier uses Ping Federate for SAML-based single sign-on. I've got some custom SAML 2.0 code which implements a rudimentary identity provider. I'm doing IDP-initiated SSO with URL and HTTP Post. The PF service provider is at…
Brian Lyttle
  • 14,558
  • 15
  • 68
  • 104
3
votes
2 answers

OIDC - Obtaining an Identity Token for use by a backend (no actual user) service running scheduled jobs

We have an API (Actually several micro-services) secured by OIDC. The authorization server is owned and managed by our customers (not internal to us) and provides our SPA with an identity token. That SPA then passes that identity token to our…
1
2 3
20 21