Defining SLO service URLs (SAML 2.0) - PingFederate - 11.0

PingFederate Server

bundle
pingfederate-110
ft:publication_title
PingFederate Server
Product_Version_ce
PingFederate 11.0
category
Product
pf-110
pingfederate
ContentType_ce

On the SLO Service URLs tab, associate bindings to the endpoints where your identity provider (IdP) receives logout requests when single logout (SLO) is initiated at your site and where PingFederate sends SLO responses when it receives SLO requests from the IdP.

This process only applies to SAML 2.0 connections when either SLO profile is selected on the SAML Profiles tab.

  1. Go to Applications > Integrations > SP Connections.
  2. Click on any SAML 2.0 connection, and then click the Browser SSO tab.
  3. Click Configure Browser SSO, and then click the SAML Profiles tab.
  4. Select a SAML binding from the list; for example, POST.
  5. Enter the SLO endpoint URL in the Endpoint URL field.

    You can enter a relative path, starting with a forward slash, if you have provided a base URL on the General Info tab.

  6. Optional: Enter a URL in the Response URL field.

    When specified, it is the location where SLO logout response messages are sent based on your partner agreement. When omitted, PingFederate sends logout responses to the SLO endpoint URL.

    You can enter a relative path, starting with a forward slash, if you have provided a base URL on the General Info tab.

  7. Click Add.
  8. Optional: Repeat to add additional SLO endpoints.

If you are editing an existing connection, you can reconfigure the SLO endpoints, which might require additional configuration changes in subsequent tasks.