Tip:

When using PingFederate as the token provider for this feature, export the Generated: ENGINE keypair from PingAccess, located under Security > Key Pairs, and import to PingFederate trusted certificate authorities (CAs).