---
title: Configuring a MobileIron Adapter instance
description: Configure the MobileIron Adapter to determine how PingFederate communicates with MobileIron.
component: mobileiron
page_id: mobileiron:setup:pf_mobileiron_ik_creating_a_mobileiron_adapter_instance
canonical_url: https://docs.pingidentity.com/integrations/mobileiron/setup/pf_mobileiron_ik_creating_a_mobileiron_adapter_instance.html
revdate: April 14, 2026
section_ids:
  steps: Steps
  next-steps: Next steps
---

# Configuring a MobileIron Adapter instance

Configure the MobileIron Adapter to determine how PingFederate communicates with MobileIron.

## Steps

1. In the PingFederate admin console, go to **Authentication > Integration > IdP Adapters**. Click **Create New Instance**.

2. On the **Type** tab, set the basic adapter instance attributes:

   1. In the **Instance Name** field, enter a name for the adapter instance.

   2. In the **Instance ID** field, enter a unique identifier for the adapter instance.

      The instance ID must contain only alphanumeric characters.

   3. In the **Type** list, select **MobileIron Adapter *\<version>***. Click **Next**.

3. On the **IdP Adapter** tab, configure the adapter instance:

   1. In the **Hostname** field, enter the hostname for your MobileIron instance.

   2. In the **API User Username** field, enter your API user's username.

   3. In the **API User Password** field, enter your API user's password for querying the CPS API.

   4. Click **Next**.

4. On the **Extended Contract** tab, configure any other attributes that you expect to receive. Click **Next**.

   |   |                                                                                                                                                                                                                                                                                                      |
   | - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | The **Extended Contract** tab lists all the available attributes MobileIron can manage for devices. These are the attributes that can be used to make authentication decisions for your users. Learn more in [Supported attributes reference](pf_mobileiron_ik_supported_attributes_reference.html). |

5. On the **Adapter Attributes** tab, set pseudonym and masking options as shown in [Set pseudonym and masking options](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_setting_pseudonym_masking_options.html) in the PingFederate documentation. Click **Next**.

6. On the **Adapter Contract Mapping** tab, configure the contract fulfillment details for the adapter as shown in [Define the IdP adapter contract](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/help_authnadapterinstancetasklet_plugincontractstate.html) in the PingFederate documentation.

   You can also find some contract fulfillment examples in [Configuration examples](pf_mobileiron_ik_configuration_examples.html).

7. On the **Summary** tab, check your configuration, and then click **Save**.

## Next steps

1. Go to **Authentication > Integration > IdP Adapters** and open the configured X509 Adapter for editing.

2. On the **IdP Adapter** tab, click **Show Advanced Fields** and select the **Include Subject Alternative Name (SAN)** checkbox.

3. On the **Extended Contract** tab, edit the configuration to include the name of the subject alternative name key.

4. Save the X509 Adapter configuration.