Configure the plugin

The URL to configure the Authenticator is http[s]://atlassian_hostname:atlassian_port/plugins/servlet/ping/config

The configuration page is also accessible at Manage apps → PingFederate SSO Configuration → /:

Configuration options
Field	Description
Configuration Directory	Configuration settings are stored here. If using Mutual SSL, put certificates in this directory. For more information, see Defining the Authenticator configuration directory.
Pickup URL	`https://pf_host:pf_port/ext/ref/pickup` When configuring a pickup URL: Always use HTTPS over HTTP Enable the Require SSL/TLS option within the PingFederate SP Reference ID adapter configuration If using Mutual SSL Authentication, `pf_port` in the Pickup URL must match the port specified in the PingFederate `run.properties` for the `pf.secondary.https.port` (Step 1 of Configuring PingFederate for mutual SSL authentication)
SP Adapter Instance ID	The Instance ID of your PingFederate SP Reference ID adapter.
Authentication	Determines the type of authentication to be performed between the Authenticator and the Reference ID adapter. Mutual SSL: You should use this option as it provides the highest level of security. For more information, see Mutual SSL authentication Basic: Uses a username and passphrase to authenticate with PingFederate . For more information, see Basic authentication