When PingFederate is serving an identity provider (IdP) role, it can receive user attributes from a .NET IdP application. When PingFederate is serving a service provider (SP) role, it can send user attributes to a .NET SP application.
Tip: For new integrations, we encourage you to consider the Agentless Integration Kit, which can integrate with a variety of platforms using a modern RESTful approach.


  • OpenToken Adapter
    • An adapter that allows PingFederate to send or receive user attributes in the OpenToken format. See OpenToken Adapter in the PingFederate documentation.
  • OpenToken Agent
    • An agent that runs within your .NET application that allows it to send or receive user attributes in the OpenToken format.
  • Sample application
    • The Integration Kit distribution also contains sample IdP and SP applications. The applications may be installed quickly for testing OpenToken processing and to provide a working demonstration of end-to-end single sign-on (SSO) and single logout (SLO). Source code and supporting files are included in the distribution and may be modified or used as a reference for application developers.

Intended audience

This document is intended for PingFederate administrators and web-application developers.

Before you start, you should be familiar with the following parts of the PingFederate documentation:

System requirements

  • PingFederate 9.0 or later.
  • Microsoft .NET Framework 4.0 for the agent application.