1. Back up your current PingFederate configuration as shown in Exporting an archive in the PingFederate documentation.
  2. On the PingFederate administrative console, note the following from your adapter instance configuration:
    • Scope permissions
    • Extended contract attributes
    • Attribute mappings
  3. Complete the steps in Deploying the integration files.
  4. In the PingFederate administrative console, open your existing IdP adapter instance.
    • For PingFederate 10.1 or later: go to Authentication > Integration > IdP Adapters. Select your IdP adapter instance.
    • For PingFederate 10.0 or earlier: go to Identity Provider > Adapters. Select your IdP adapter instance.
  5. Restore the configuration settings that you noted.
  6. If any of the following scope permissions in the Scope Permissions section are blank, configure it again, and then click Update:
    • email
    • user_hometown
    • user_location
  7. In Advanced Configuration Fields section, update the API version numbers in the following endpoints:
    • Facebook Authentication URL
    • Facebook Access Token URL
    • Facebook User Data URL

    For example, change https://graph.facebook.com/v2.2/me to https://graph.facebook.com/v8.0/me.

    For a list of available API versions, see the Graph API Changelog in the Facebook documentation.

    To automatically use the oldest available version of the API, remove the /v2.2 or equivalent portion of the URL. For example, https://graph.facebook.com/me.

  8. Remove any query parameters from the Facebook User Data URL field.

    For example, change https://graph.facebook.com/me?fields=id,birthday,email to https://graph.facebook.com/me.

  9. On the Extended Contract screen, add any non-core attributes that you want to include in the contract, such as those associated with additional permissions that you configured.
    If you upgraded from a previous version of the Facebook IdP Adapter, add any attributes that were previously configured but are no longer part of the core contract. For a list of core contract attributes, see Core contract attributes reference.
  10. On the Adapter Attributes tab, set pseudonym and masking options as shown in Set pseudonym and masking options in the PingFederate documentation. Click Next.
  11. On the Adapter Contract Mapping tab, configure the contract fulfillment details for the adapter as shown in Define the IdP adapter contract in the PingFederate documentation. Remap any attributes that Facebook has deprecated that you want to continue using. Click Next.
  12. Click Save.