Administrative SSO lockout
If you misconfigure administrative single sign-on (SSO) and are locked out of the PingAccess administrative console, you can disable SSO and sign on using the native sign-on.
Choose one of the following methods to disable SSO:
-
If you can access the PingAccess system or the PingAccess administrative node in a cluster, see Editing
run.properties
to disable SSO. -
If basic authorization wasn’t disabled, see Using the administrative API to disable SSO.
-
If basic authorization is disabled but administrative API OAuth is enabled, see Using the administrative API and a new token to disable SSO.