Adding virtual issuers for OpenID Connect - PingFederate - 11.3

PingFederate Server

bundle
pingfederate-113
ft:publication_title
PingFederate Server
Product_Version_ce
PingFederate 11.3 (Latest)
category
Administrator
Administratorguide
Audience
Capability
ContentType
DeploymentMethod
Guide
Product
Productdocumentation
SingleSignonSSO
Software
SystemAdministrator
pf-113
pingfederate
ContentType_ce
Guide
Guide > Administrator Guide
Product documentation

You can define one or more virtual issuers for OpenID Connect, with or without a relative path. When minting an ID token, PingFederate populates the issuer claim according to the virtual issuer setting and the authorization request.

To add a virtual issuer to PingFederate, perform the following procedure. If you have multiple virtual issuers, ensure the combination of host and path values are unique.

Note: After you define virtual issuers, you can map them to sets of ID token signing keys. For more information, see Mapping ID token signing keys to virtual issuers.
  1. Go to System > OAuth Settings > Virtual Issuers.
  2. Click Add Virtual Issuer.
  3. Enter a unique issuer Name.
  4. Enter the Host.
  5. Optional: Enter the relative Path, which must start with the value of the pf.runtime.context.path property in the run.properties file.
  6. Click Save.