PingOne Integration
Customer IT / SpaceIQ Onboarding Team
SpaceIQ (SiQ) supports integration with the Ping identity management system. This details how to configure the PingOne integration for SiQ.
It is not possible to import (or pull) new users or profile updates from within SiQ. The information must be pushed from PingOne .
Contents
Prerequisites
- You will need PingOne with administration privileges to complete this integration and for the SiQ setup, you must have a SiQ Admin or an IT role.
Set up SSO using SAML for SiQ
This section describes how to set up SSO using SAML (Security Assertion Markup Language) (SAML), so your users can use their PingOne credentials to sign in to SiQ app.
Step 1. Find the PingOne Identity Provider (IdP) information
For more information on PingOne, see their documentation.
From the PingOne SSO Admin Console, complete the following:
- Sign in to PingOne SSO admin portal as an Administrator.
- Add the SiQ application.
- Edit the SiQ application to copy the following:
- Copy Issuer URL and paste into Step 2's SAML Identity Provider Issuer URL field.
- Copy the X.509 certificate and paste into Step 2's X.509 Certificate field.
Leave the Admin console open.
Step 2. Active the PingOne Integration in SiQ
From the SiQ Web App, complete the following:
- Click your Profile Name in the top right corner.
- Click Settings. The Settings screen displays.
- From the left menu, click Integrations.
- From the Third Party Integrations area, click the READ MORE link. The Integrations screen displays.
You can either search for PingOne in the Search field or navigate to the PingOne tile. To navigate complete the following:
- From the left menu, click Provisioning & SSO.
- For PingOne, click the Activate button.
The PingOne dialog displays and contains the Provisioning tab and the SSO tab.
- Click the SSO tab.
- In the SAML Identity Provider Issuer URL field, paste the Issuer URL from Step 1.
- In the X.509 Certificate field, paste the certificate you downloaded in Step 1.
Step 3. Complete the SSO Configuration in PingOne
Complete the SiQ's PingOne Integration fields.
From the PingOne SSO Admin Console, complete the following:
- Edit the SiQ application to copy the following:
- Copy Application ACS URL and paste into PingOne SSO Application ACS URL field in the PingOne SSO Admin Console.
- Copy Application SAML Audience / Entity ID and paste into Application SAML audience field in the PingOne SSO Admin Console.
- Optional - In the PingOne SSO Portal URL field enter the domain name URL to be redirected back to PingOne SSO market space after logout.
- Optional - In the SSO Redirect URL (SiQ Portal) field, enter the SSO redirect to automatically authenticate users from SiQ Portal using SSO.
- Click the Activate button.