All environments managed within PingCentral, as well as connected PingFederate and PingAccess environments, display on the Environments page, where you can view and update information about each environment and delete them from PingCentral when they are no longer needed.
Items worth mentioning:
- If you add PingAccess environments to PingCentral, ensure that PingFederate is configured as the PingAccess token provider. See Configuring PingFederate as a PingAccess token provider for details.
- If your application owners promote SAML applications to PingFederate or PingAccess environments, ensure that the appropriate
trusted certificate authority (CA) certificates are available in PingCentral. See Adding trusted CA certificates to PingCentral for details.Note:
Starting with PingCentral 1.8, trusted CA certificates are stored in the PingCentral database instead of an external trust store. Certificates that exist in this trust store in previous versions are imported to the PingCentral database during the upgrade process.
Adding environments
Use the wizard to add PingFederate and PingAccess environments to PingCentral.
- On the Environments page, click Add Environment.
-
On the Connect to Instances page, connect to a PingFederate environment:
-
Click the expandable icon associated with the environment to view
environment details.Environment details include:
- A link to PingFederate.
- A description of the environment.
- The total number of applications hosted on this environment and
a breakdown of OAuth/OIDC clients and SAML service provider (SP)
connections. Click these links to access filtered lists of these
applications on the Applications
page.
-
Click the expandable icon associated with the environment to view
environment details.Environment details include:
-
To add a PingAccess environment instance
to PingCentral, access the
Connect to Instances page by either clicking on
Add Environment or by clicking the
Pencil icon for an existing PingAccess application.
-
Click Save and Continue.
The environment is displayed on the Environments page. If you chose to protect the environment, a shield icon displays next to its name. A PA icon also displays. The color of this icon represents the status of the environment. A green PA icon indicates that the environment is verified while a red PA icon indicates that the environment isn't verified.
-
Click Save and Continue.
Updating environments
Update PingFederate and PingAccess environment information at any time.
-
To edit environment information, click the expandable icon associated with it,
and then click the Pencil icon. All of the editable
information displays on one page.
Option Description To update the name and description: To update the name and description, change the information in the Name, Short Code, and Description fields. To update the assertion encryption certificate: To update the assertion encryption certificate, click Choose to upload a new certificate and enter the certificate password in the appropriate field. To update connection information: To update the connection information for either a PingFederate or PingAccess environment, change the information in the Username and Password fields. Note:If a PingAccess environment is added to PingCentral and removed through the edit page, the connection information is saved and restored if the PingAccess environment is selected again.
To add or remove protection status: To add or remove the protected status of an environment, which prevents non-administrators from promoting applications to the environment, select or clear the Only Administrators Can Promote Applications check box. To update the signing certificate: To update the signing certificate used to promote SAML applications, select the appropriate certificate in the Signing Certificate list or upload your own. To update the SP certificate: To update the SP certificate, click Choose to upload a new certificate and enter the certificate password in the appropriate field. To update the assertion encryption certificate: To update the assertion encryption certificate, click Choose to upload a new certificate and enter the certificate password in the appropriate field. - Click Save.
Deleting environments
Delete environments from PingCentral when they are no longer needed.
Configuring PingFederate as a PingAccess token provider
To add PingAccess environments to PingCentral, PingFederate must be configured as the token provider. If you have PingFederate and PingAccess environments established, this configuration is likely in place.
-
To locate this information:
- In PingFederate, to locate the Base
URL field, go to , as shown in the following example.
- In PingAccess, to locate the Issuer
URLfield, go to . Note: In some versions of PingAccess, the Issuer URL might exist as separate Host and Port fields.
- In PingFederate, to locate the Base
URL field, go to , as shown in the following example.
-
If a virtual host is defined in PingFederate,
the PingAccess Issuer URL can reference
that instead of Base URL. In PingFederate, to
locate the virtual host, go the page and review the information in the Host Domain
Name field.
Adding trusted CA certificates to PingCentral
For application owners to securely promote SAML applications to PingFederate and PingAccess environments, trusted certificate authority (CA) certificates must be available in PingCentral.
-
Click the Expand icon for the certificate to view
details.
