PingFederate Server

Restricting a token processor to certain virtual server IDs

Virtual server IDs provide more configuration flexibility in cases where you need to identify your server differently when connecting to a partner in one connection for multiple environments or in multiple connections where the partner also supports multiple federation IDs. When you multiplex one connection for multiple environments, you can restrict each token processor added to a WS-Trust STS SP connection or IdP connection.

About this task

When you multiplex one connection for multiple environments see Multiple virtual server IDs, you can enforce authentication requirements by restricting a token processor to certain virtual server IDs on the Virtual Server IDs tab. By default, no restriction is imposed.

If you are editing a currently mapped token processor instance, you can toggle the Restrict Virtual Server IDs setting. You can also change the allowed virtual server IDs.

Steps

  1. In the IdP Token Processor Mapping configuration window, go to the Virtual Server IDs tab.

    Select the Restrict Virtual Server IDs check box.

    Select one or more virtual server IDs that you want to allow for this token processor.