Configuring LDAP attributes in PingFederate - PingID

PingID Administration Guide
bundle
pingid
ft:publication_title
PingID Administration Guide
Product_Version_ce
PingID
category
ContentType
Product
Productdocumentation
pingid
ContentType_ce
Product documentation

If you are using PingFederate as your identity provider (IdP) and want to enable backup authentication or pre-populate or restrict user data, you must first configure the relevant attributes in the PingID adapter.

Ensure that PingFederate is connected to an LDAP data source.

For more information, see Configuring backup authentication methods and Pre-populating or restricting user registration data.

  1. Sign on to the PingFederate administrative console, and go to the Manage IdP Adapter Instances window.
    • PingFederate 10.0 and earlier: Go to IdP Configuration > Application Integration > Adapters.
    • PingFederate 10.1 and later: Go to Authentication > Integration > IdP Adapters.
  2. In the Instance Name column, click PingID.
    A screen capture of the Manage IdP Adapter Instances window.
  3. Click Show Advanced Fields.
    A screen capture of the IdP Adapter tab. The Show Advanced Fields button is located directly to the right of the Manage Data Stores button.
  4. Fill in the relevant fields, and then click Done.
    FieldDescription
    Email Attribute

    The LDAP attribute containing the user email address.
    Secondary Email Attribute

    The LDAP attribute containing an additional user email address.
    Phone Attribute

    The LDAP attribute of the phone number used for SMS messages, as well as voice calls if Voice Number attribute is left empty.
    Voice Number Attribute

    The LDAP attribute of the phone number used for voice calls. If left empty, the Phone Attribute is used for voice calls.
    Note:

    The Phone Attribute and Voice Number Attribute fields must use the Google Library format, which specifies that all phone numbers must include "+" and the international country code.