Setting up SSO to PingOne for Enterprise or PingID
If your organization has set up PingOne for Enterprise, you can use single sign-on (SSO) from the PingOne admin console to the PingOne for Enterprise tenant. This allows organizations with multiple instances of PingOne for Enterprise or PingID to keep track of each environment without having to use a unique email address for each sign-on.
Before you begin
To set up SSO to PingOne for Enterprise, you must have the Organization Admin role assigned in PingOne. Learn more in Administrator Roles.
About this task
You’ll use SSO to PingOne for Enterprise by selecting the Enable SSO option on the sign-on page. Although user mapping is accomplished by an administrator signing on with an email address and password, SSO is set up using OpenID Connect (OIDC).
Steps
-
In the PingOne admin console, go to the Overview page.
-
In the Services section, click the PingOne for Enterprise icon or PingID icon.
If you don’t see the PingOne for Enterprise or PingID icons, your organization doesn’t have those services configured. Learn more in Building solutions.
Result:
The Sign On window opens.
-
Enter your username and password.
-
Select the Enable SSO from My Ping checkbox.
This checkbox displays only if you have an Organization Admin role.
-
Click Sign On.
Result:
You see the following message:
-
Click Continue.
-
To remove the SSO link to your account or map to a different account, click the Manage SSO link.
The Manage SSO link allows you to unlink your username.
-
If you have the Organization Admin role and you want to unlink the environment for all administrator users, click Disable SSO.
