Adding an identity provider - X
Adding X as an external identity provider (IdP) gives your users the option to sign on with X when accessing your application.
Before you begin
Ensure that you have:
-
A PingOne organization with an environment added. Learn more in Starting a PingOne trial.
-
Added your application to PingOne. Learn more in Adding an application.
-
An X account
Registering the application with X
To enable signing on with X, you must register your application with X.
Steps
-
Go to the X Developer site and sign on to your account.
If you haven’t created an X Developer account, you can do so now.
-
Click Create an app.
-
Enter the appropriate information.
-
Select Enable sign in with X.
-
Click Create.
Enabling email communication
Enable email communication to retrieve a user’s email address from X.
Steps
-
Go to the X Developer site.
-
Select your application.
-
Click Edit, then click Edit details.
-
On the Permissions tab, click Edit.
-
Enable the Request email addresses from users option.
-
Click Save.
Getting the API key and API secret
When you register your application, X generates an API key to identify the application.
Steps
-
Go to the X Developer site.
-
Select your application.
-
On the Keys and tokens tab, copy the following values to a secure location:
-
API key: The consumer key that identifies the application.
-
API secret key: The consumer secret that secures the application.
-
Adding X as an identity provider in PingOne
Configure the IdP connection in PingOne.
Before you begin
Ensure that registration is enabled in the authentication policy. Learn more in Editing an authentication policy.
You should have the following information ready:
-
API key
-
API secret key
Learn more in Getting the API key and API secret.
Steps
-
In the PingOne admin console, go to Integrations > External IdPs and click .
-
Click X.
-
Click Next.
-
On the Add External Identity Provider page, enter the following information:
-
Name: A unique identifier for the IdP.
-
Description (optional): A brief description of the IdP.
-
Population: A population that overrides the authentication policy’s registration population and enables just-in-time registration from the IdP.
You can’t change the Icon and Sign-on Button in accordance with the provider’s brand standards.
-
-
Click Next.
-
Configure the connection and enter the following information:
-
API key: The consumer key that you copied earlier from the IdP. You can find this information on the X Developer site.
-
API secret key: The consumer secret that you copied earlier from the IdP. You can find this information on the X Developer site.
-
Callback URL: Copy the Callback URL to a secure location. You’ll provide this value to the IdP later.
-
-
Click Next.
-
Define how the PingOne user attributes are mapped to IdP attributes. Learn more in Mapping attributes.
-
Enter the PingOne user profile attribute and the external IdP attribute. Learn more about attribute syntax in Identity provider attributes.
-
To add an attribute, click Add.
-
To use the advanced expression builder, click the Gear icon. Learn more in Using the expression builder.
-
Select the update condition, which determines how PingOne updates its user directory with the values from the IdP. The options are:
-
Empty only: Update the PingOne attribute only if the existing attribute is empty.
-
Always: Always update the PingOne directory attribute.
-
-
-
Click Save.
Adding the callback URL to the X Developer site
Copy the callback URL from the PingOne admin console and paste it in the X Developer site.
Steps
-
In the PingOne admin console, go to Integrations > External IdPs and browse or search for the appropriate IdP.
-
Click the IdP to open the details panel.
-
On the Connection tab, copy the Callback URL to a secure location.
-
On the X Developer site, select your application.
-
On the App details tab, for Callback URL, paste the value that you copied earlier.
-
Click Save.