Attention: Updates and support have ended for this integration, because this integration relies on the "mcrypt" extension, which was deprecated after PHP 7.1. The availability of this user guide and the related product download is intended only for those who have existing solutions using this integration.
Tip: For new integrations, we encourage you to use the Agentless Integration Kit, which offers samesite cookie support and can integrate with a variety of platforms using a modern RESTful approach.


  • OpenToken adapter and agent
    • Allows developers to integrate their PHP applications with a PingFederate server acting as either an identity provider (IdP) or a service provider (SP). The integration kit allows an IdP server to receive user attributes from a PHP IdP application. On the SP side, the integration kit allows a PHP SP application to receive user attributes from the SP server.
  • Sample applications
    • The Integration Kit distribution also contains sample IdP and SP applications. The applications may be installed quickly for testing OpenToken processing and to provide a working demonstration of end-to-end single sign-on (SSO) and single logout (SLO). Source code and supporting files are included in the distribution and may be modified or used as a reference for application developers.

Intended audience

This document is intended for PingFederate administrators and web application developers.

Before starting, we recommend that you familiarize yourself with the following sections of the PingFederate documentation:

System requirements

  • PingFederate 8.0 or later.
  • A web server running PHP 5.4.8 to 7.1.
  • The following extensions must be available on the PHP server: