The following figure illustrates how PingFederate and the Token Generator interact with the CTS:

Processing Steps

  1. The WSP accepts an incoming SAML assertion.
  2. The WSP makes a RST to PingFederate STS.
  3. The Token Generator parses the attributes in the SAML and queries the CTS for a valid token.
  4. The CoreBlox session token and mapped SAML attributes are embedded in a RSTR that is sent back to the WSP.