Box Connection Configuration
About this task
PingOne for Enterprise automatically populates the values for the ACS URL and Entity ID fields. All other fields are optional.
For most configurations, the values on this tab should not change.
Steps
-
Import the metadata for Box:
Choose from:
-
Click Select File to upload the metadata file.
-
Click Or use URL to enter the URL of the metadata.
-
-
In the ACS URL field, the value should be
https://sso.services.box.net/sp/ACS.saml2. -
In the Entity ID field, the value should be
box.net. -
In the Target Resource field, enter a URL to redirect the user to after IdP-initiated single sign-on (SSO).
-
In the Single Logout Endpoint field, enter a URL for PingOne for Enterprise to send single logout (SLO) requests to.
-
In the Single Logout Response Endpoint field, enter a URL for PingOne for Enterprise to send SLO responses to.
-
On the Primary Verification Certificate line, click Browse to locate and upload a local certificate file used to verify SLO requests and responses.
-
On the Secondary Verification Certificate line, click Browse to locate and upload a local certificate used to verify SLO requests and responses if the primary certificate fails.
-
Select the Force Re-authentication checkbox to require your identity bridge to re-authenticate users with an active SSO session.
-
Select the Encrypt Assertion checkbox to encrypt outgoing SAML assertions.
-
On the Signing line:
Choose from:
-
Click Sign Assertion to have PingOne for Enterprise sign outgoing SAML assertions. This is the default option.
-
Click Sign Response to have PingOne for Enterprise sign responses to incoming SAML assertions.
-
-
From the Signing Algorithm list, select an algorithm with which to sign SAML assertions.
-
Select the Use Custom URL checkbox to enter a customer URL to launch Achievers from the dock.
-
Select the Set Up Provisioning checkbox to configure user provisioning to Box.
Next steps
Click Continue to Next Step.