PingOne

Adding an identity provider - PayPal

Adding PayPal as an external identity provider (IdP) gives your users the option to sign in with their PayPal accounts when accessing your application.

Before you begin

Ensure that the application is added to PingOne.

Set the Grant Type for the application to Implicit.

Learn more in Adding an application.

Registering your application with PayPal

Create your application with PayPal, and then copy the client ID and client secret.

Before you begin

Ensure that you have a PayPal account with an active subscription.

Steps

  1. Go to PayPal for Developers at developer.paypal.com.

  2. In the upper right, click Log into Dashboard.

    If you don’t have a PayPal account, you can create one now.

  3. In the My apps and credentials section, click Sandbox.

  4. In the Rest API apps section, click Create app.

  5. In the Application details field, enter a name for the application, and then click Create app.

  6. In the Sandbox API credentials section, copy the Client ID to a secure location.

  7. In the Secret section, click Show.

  8. Copy the client secret to a secure location.

  9. In the App feature options section, select Connect with PayPal.

    You can clear the other options, unless your organization has a specific need for them.

  10. Click Save.

Configuring scopes and options

On the PayPal for Developers site, configure the options for scope attributes, permissions, and customer consent.

Steps

  1. Go to PayPal for Developers at developer.paypal.com.

  2. In the Rest API apps section, click your application name.

  3. In the Connect with PayPal section, click Advanced options.

  4. Select the following scope attributes:

    • Full name

    • Email

    • Street address

    • City

    • State

    • Country

    • Postal code

    • Account verification status

    • PayPal account ID

  5. Under Links shown on customer consent page, enter the following:

    • Privacy policy URL: (Optional). The location of your organization’s privacy policy.

    • User agreement URL: (Optional). The location of your organization’s user agreement.

  6. In the Additional PayPal permissions section, select Enable customers who have not yet confirmed their email with PayPal to log in to your app.

  7. Click Save.

Adding PayPal as an identity provider in PingOne

Configure the identity provider connection in PingOne.

Steps

  1. In PingOne, go to Integrations → External IdPs.

  2. Click Add Provider.

  3. Click PayPal.

  4. On the Create Profile page, enter the following information:

    • Name: A unique identifier for the IdP

    • Description: (Optional). A brief description of the identity provider.

    You cannot change the icon and login button, in accordance with the provider’s brand standards.

  5. Click Next.

  6. On the Configure Connection page, enter the following information:

    • Client ID: The application ID from the IdP that you copied earlier. You can find this information on the PayPal for Developers site.

    • Client secret: The application secret from the IdP that you copied earlier. You can find this information on the PayPal for Developers site.

  7. Click Save and Continue.

  8. On the Map Attributes page, define how the PingOne user attributes are mapped to identity provider attributes. For more information, see Mapping attributes.

    • Enter the PingOne user profile attribute and the external IdP attribute. For more information about attribute syntax, see Identity provider attributes.

    • To add an attribute, click Add attribute.

    • To use the expression builder, click Build and test or Advanced Expression. See Using the expression builder.

    • Select the update condition, which determines how PingOne updates its user directory with the values from the identity provider. The options are:

      • Empty only: Update the PingOne attribute only if the existing attribute is empty.

      • Always: Always update the PingOne directory attribute.

  9. Click Save and Finish.

Registering the return URL with PayPal

Copy the value for Return URL and enter it into the PayPal for Developers site.

Before you begin

Ensure that you have the Callback URL from the PingOne console.

Steps

  1. In PingOne, go to Integrations → External IdPs.

  2. Locate the appropriate IdP and then click the details icon to expand the IdP.

  3. Click the Connection tab.

  4. Copy the callback URL and paste it in a secure location.

  5. Go to PayPal for Developers at developer.paypal.com.

  6. In the Rest API apps section, click your application name.

  7. In the Sandbox app settings section, locate Return URL.

  8. Click Show.

  9. For Return URL, enter the value that you copied from the PingOne console.

  10. Click Save.

Next steps