Adding custom HTTP response headers - PingFederate

Page created: 16 Jul 2021 |

Page updated: 19 Jan 2022

| 1 min read

Product PingFederate 11.0 Configuration User task Software Deployment Method Product documentation Content Type Administrator Audience

The PingFederate administrative console and runtime server are capable of returning custom HTTP response headers, such as HTTP Strict-Transport-Security (HSTS), to enforce HTTPS-based access and P3P.

Edit the response-header-admin-config.xml file or the response-header-runtime-config.xml file, or both, located in the <pf_install>/pingfederate/server/default/data/config-store directory.
Save your changes.
Restart PingFederate.

For a clustered PingFederate environment, perform these steps on the console node, and then click Replicate Configuration on System > Server > Cluster Management. You do not have to restart PingFederate on any running engine node.

Adding custom HTTP response headers - PingFederate - 11.0

PingFederate Server