The following is a sample PingFederate configuration. Minimal support for Delegated Admin includes configuring PingFederate to use the HTML Form Adapter to authenticate users for Delegated Admin, and configuring PingFederate to identify an authenticated user through the user’s entryUUID, which is mapped to the subject of the OIDC token.

Note: Some of the PingFederate interface terms have changed from version 9.0 to the latest version. The terminology in this sample configuration represents version 9.2.