PingAccess

Using the administrative API and a new token to disable SSO

If basic authorization is disabled but administrative application programming interface (API) OAuth is enabled, you can also use the administrative API to disable single sign-on (SSO).

Steps

  1. Retrieve a valid token for admin API OAuth from your token provider.

  2. Submit a PUT request to https://<pa-host>/pa-admin-api/<api version>/auth/oidc with the valid access token, where <pa-host> is the hostname:port for the PingAccess admin node and <api-version> is the API version (v3 on PingAccess 5.0 or later, and v2 on 4.X).

    The request body must contain:

    {
 "enabled": false,
}

Result

You can sign on normally and reconfigure the SSO from Settings → Admin UI Authentication → Authentication Method.