PingIdentity SSO

In this guide, you're going to learn how to connect PingIdentity with Better Stack to enable single sign-on (SSO) for you and your colleagues.

SSO set-up walkthrough

  1. Start the SSO set-up by going to Single Sign-On configuration. Note that only organization admins have access to these settings.

  2. On this page click Connect on the Generic SAML SSO panel.

  3. Select PingIdentity from the list of supported providers.

  4. Take note of the value in the Entity ID and ACS URL fields, we're going to need this in a second.

We're going to switch to the PingIdentity console now.

  1. Sign in to the PingIdentity console as an admin.

  2. In the left menu, select Applications.

  3. Click the circled + icon to open the Add Application form.

  4. Click Configure to continue.

  5. Under SAML Configuration select Manually Enter.

  6. Fill in ACS URL with the ACS URL copied from Better Stack.

  7. Fill in Entity ID with the Entity ID copied from Better Stack.

  8. Click Save to continue.

  9. Toggle the switch in the top-right corner to enable the application.

  10. Under Connection Details, take a note of the Initiate Single Sign-On URL, we're going to need this in a second.

  11. Click on Download Signing Certificate, and choose the X509 PEM (.crt) format. Save the file, we're going to need it in a second.

  12. Click on the Attribute Mappings tab.

  13. Click on the Edit icon, to edit attribute mappings.

  14. Click Add, then fill in email on the left and select Email Address on the right.

  15. Click Add again, then fill in first_name on the left and select Given Name on the right.

  16. Click Add one final time, then fill in last_name on the left and select Family Name on the right.

  17. Click Save to save the new attribute mappings.

We're returning to Better Stack now.

  1. Back on Better Stack, fill Identity Provider Single Sign-On URL with the Initiate Single Sign-On URL from PingIdentity.

  2. Under X.509 Certificate, click Upload and select the certificate file from PingIdentity.

  3. Click Connect to confirm the configuration. You will be redirected to PingIdentity. Sign in with the account you assigned to the Better Stack application, please.

Tada! Your PingIdentity Single Sign-On is now configured!