PingOne

Setting up SSO to PingOne Advanced Identity Cloud

To set up single sign-on (SSO) access for administrators from the PingOne admin console to PingOne Advanced Identity Cloud, configure PingOne with each Advanced Identity Cloud tenant environment and test the sign-on experience.

Before you begin

Ensure that you have:

  • A PingOne account.

  • A separate environment added to your PingOne account for each Advanced Identity Cloud tenant environment for which you want to set up SSO access from PingOne.

    Learn more in Creating an environment.

  • The following administrator roles assigned:

    • In your PingOne environment:

      • Identity Data Admin

      • Environment Admin

      • Advanced Identity Cloud Super Admin

      Learn more in Administrator Roles and Managing user roles.

    • In your Advanced Identity Cloud tenant environment:

      • Advanced Identity Cloud Super Admin

        Learn more about assigning admin roles in Tenant administrator settings in the Advanced Identity Cloud documentation.

      Because Advanced Identity Cloud is made up of several individual tenant environments, you must complete the configuration steps for each Advanced Identity Cloud tenant environment.

Adding PingOne Advanced Identity Cloud to an environment

Add Advanced Identity Cloud to your existing PingOne environment.

Steps

  1. In the PingOne admin console sidebar, click the Ping Identity logo to open the Environments page and browse or search for the applicable environment.

  2. On the Environments page, click the environment to open the details panel.

  3. Click Manage Environment and click Overview in the sidebar.

  4. In the Environment Capabilities section, click the Plus icon ().

  5. Click Add next to PingOne Advanced Identity Cloud and any other products or services that you want to add to the environment.

  6. Click Finish.

Configuring SSO to PingOne Advanced Identity Cloud

After adding Advanced Identity Cloud to your environment, configure SSO from the PingOne admin console.

Steps

  1. In the PingOne admin console, in the Environments list, click the environment with Advanced Identity Cloud and click Manage Environment.

  2. On the Overview page, in the Optional Connections section, locate PingOne Advanced Identity Cloud and click the More Options icon ().

    A screen capture of the PingOne Advanced Identity Cloud tile with the Configure Administrator SSO button - not set up.

  3. Click Configure.

  4. In the Advanced Identity Cloud URL field, enter the URL for the Advanced Identity Cloud administrative tenant.

    The URL must end with .forgerock.io or .forgeblocks.com. Learn more in Sign on to a tenant admin console in the Advanced Identity Cloud documentation.

  5. In the Direct Sign-On Environment list, select the environment that administrators must be associated with when authenticating directly from Advanced Identity Cloud using the Sign in with PingOne option.

    Any administrator with an appropriate Advanced Identity Cloud role from any environment in PingOne can use SSO into Advanced Identity Cloud from PingOne.

  6. Click Connect.

    Result:

    PingOne opens a new browser tab with the Advanced Identity Cloud sign-on screen.

  7. Go to the new browser tab and enter your Advanced Identity Cloud credentials to complete setup.

    Result:

    PingOne creates a connection to Advanced Identity Cloud. A New label shows on the Advanced Identity Cloud entry. It can take up to 10 minutes to complete the connection.

    A screen capture of PingOne Advanced Identity Cloud in the Optional Connections list with a New label.

After the connection is complete, you can click the product name to use SSO to access Advanced Identity Cloud. The New label persists only for the active session.

Testing SSO to PingOne Advanced Identity Cloud

After configuring PingOne and Advanced Identity Cloud, test the SSO experience.

Steps

  1. In the PingOne admin console sidebar, click the Ping Identity logo to open the Environments page and browse or search for the applicable environment.

  2. On the Environments page, click the environment to open the details panel.

  3. Click Manage Environment and click Overview in the sidebar.

  4. In the Optional Connections section, click PingOne Advanced Identity Cloud.

Result

The Advanced Identity Cloud admin UI opens.

Inviting additional PingOne Advanced Identity Cloud administrators

After verifying the connection and gaining SSO access to the Advanced Identity Cloud tenant, the PingOne Advanced Identity Cloud Super Admin can invite additional Advanced Identity Cloud Super Admins and Tenant Admins to access the Advanced Identity Cloud tenant.

Steps

  • In the PingOne admin console, add admins with SSO access to the tenant.

    These users can be assigned either the Advanced Identity Cloud Super Admin or Advanced Identity Cloud Tenant Admin role for the Advanced Identity Cloud tenant.

Next steps

Repeat the configuration steps for each Advanced Identity Cloud tenant environment for which you want to set up SSO access from PingOne.