PingOne for Enterprise

Configure the dock when using PingOne for Enterprise Directory

About this task

When using the PingOne for Enterprise Directory, you can configure the following options for the dock:

  • Change the format of the URL used to access the dock.

  • Give your users the option to add personal apps to the dock.

If you are not using PingOne for Enterprise Directory as your identity repository, the configuration options differ slightly. See Configuring the dock when using an identity bridge

If you’re currently using the legacy PingOne dock, you can configure and customize the new dock, then preview your changes using the displayed Upgraded Ping Dock URL before upgrading to the new dock. Your users can continue to work in the legacy dock until you upgrade.

Steps

  1. Click Setup → Dock.

  2. Optional: In Configuration, edit one or more of the following configuration settings:

    Option Description

    Company ID

    The unique identifier for your company.

    This string becomes part of your dock URL.

    Maximum Session Lifetime

    In theMaximum Session Lifetime list, select the maximum duration of a user session before the user is automatically signed out.

    The minimum duration is 15 minutes. The default is 2 hours. The maximum is 12 hours.

    SLO Flow

    If you click Redirect, PingOne for Enterprise responds to SLO requests by visiting each application’s SLO endpoint and then returning to the sign-on page.

    If you click Single page, PingOne for Enterprise responds to SLO requests by sending requests from its own page using an iframe.

    Single page SLO flow requires third-party cookies to be enabled in the user’s browser, and session cookies in Chrome must use SameSite=None. Redirect flow works regardless of cookie settings.

    Redirect flow halts if an application fails to return control to PingOne for Enterprise. Single page flow continues even if errors occur at the application.

    OpenID Connect (OIDC) applications always follow single page flow even if Redirect is enabled. To support SLO for OIDC applications, user browsers must allow third party cookies, and Chrome cookies must use SameSite=None.

    Session Idle Timeout

    In the Session Idle Timeout list, select the maximum duration of a user’s idle time before the user is automatically signed out.

    The maximum duration is 12 hours. The idle timeout duration cannot exceed the maximum session lifetime.

    Enable Basic SSO

    Enable this option if you want to use basic single sign-on (SSO), a password vaulting capability for PingOne for Enterprise.

    See Basic SSO (password vaulting) for more information.

    Add Basic SSO Applications

    Select this to enable users to add basic SSO applications to their dock.

    Applications that users install appear on the dock in the personal category.

    User Support Message

    Enter text that shows when a user clicks the Need Help? link in the PingOne for Enterprise dock.

    Upgrade Dock

    If you are currently using the legacy dock, you can preview your changes in the dock preview until you upgrade.

    To upgrade to the new dock, click Upgrade Dock. When upgraded, this option and the dock preview are no longer available.

  3. Click Save. The changes are applied to the dock.

    To view the changes, refresh the page.