PingFederate Server

Configuring automatic connection validation

The intent of automatic multi-connection error checking is to verify that all configured connections have not been adversely affected by subsequent changes in supporting components.

About this task

Automatic multi-connection error checking occurs when you save certain supporting components, such as:

  • SP adapters

  • IdP adapters

  • token processors

  • token generators

  • password credential validators

  • identity store provisioners

As the number of connections and supporting components increases, so does the validation time. If you experience noticeable delays in saving adapters, token translators, password credential validators, or identity store provisioner, you can turn off automatic connection validation.

When automatic connection validation is turned off, error checking is deferred until you access the connection lists on the administrative console. You can make configuration changes without being prompted to fix all dependency errors immediately, but remember that the configuration changes can potentially cause service disruption.

For example, if you remove a configured source-attribute in an attribute fulfillment configuration in a connection, users will be unable to complete single sign-on (SSO) requests until you reconfigure such connections.

When you access the Connections window, if the administrative console detects one or more dependency error conditions, it displays a visual cue to indicate the errors. To resolve each error, select the applicable connection and follow the on-screen instructions to modify the configuration.

This setting does not affect the validation of a connection being configured or modified. Also, individual connections are always validated automatically when you access them on the Connections window, regardless of the configuration of this setting.

To manage this setting for SP, go to Applications → Integration → SP Connections on the SP Connections window.

To manage this setting for IdP, go to Authentication → Integration → IdP Connections on the IdP Connections window.

Steps

  • To turn off automatic multi-connection error checking, go to System → Server → General Settings, and select the Disable Automatic Connection Validation check box. This check box is not selected by default.

    For more information, see General settings.

    Result:

    After you select or clear the check box, the state of this setting is reflected on both the SP Connections window and the IdP Connections window.