Administrative SSO lockout

If you misconfigure administrative single sign-on (SSO) and are locked out of the PingAccess administrative console, you can disable SSO and sign on using the native sign-on.

Choose one of the following methods to disable SSO:

If you can access the PingAccess system or the PingAccess administrative node in a cluster, see Editing run.properties to disable SSO.
If basic authorization wasn’t disabled, see Using the administrative API to disable SSO.
If basic authorization is disabled but administrative API OAuth is enabled, see Using the administrative API and a new token to disable SSO.