The URL to configure the Authenticator is:

http[s]://atlassian_hostname:atlassian_port/plugins/servlet/ping/config.

The configuration page is also accessible at Manage apps > PingFederate SSO Configuration.

Field Description

Configuration Directory

Configuration settings are stored here. If using Mutual SSL, put certificates in this directory. For more information, see Defining the Authenticator configuration directory.

Pickup URL

https://pf_host:pf_port/ext/ref/pickup

Please make note of the following:

  • Always use HTTPS over HTTP
  • Enable the Require SSL/TLS option within the PingFederate SP Reference ID adapter configuration
  • If using Mutual SSL Authentication, pf_port in the Pickup URL must match the port specified in the PingFederate run.properties for the pf.secondary.https.port (Step 1 of Configuring PingFederate)

SP Adapter Instance ID

The Instance ID of your PingFederate SP Reference ID adapter

Authentication

Determines the type of authentication to be performed between the Authenticator and the Reference ID adapter.

Mutual SSL: You should use this option as it provides the highest level of security. For more information, see Mutual SSL authentication

Basic: Uses a username and passphrase to authenticate with PingFederate. For more information, see Basic authentication