Configure the identity provider connection in PingOne.
Ensure that registration is enabled in the authentication policy. See Editing an authentication policy.
You should have the following information ready:
- API key
- API secret key
For more information, see Getting the API key and API secret.
- In PingOne, go to Integrations > External IDPs.
- Click + Add Provider.
- Click Twitter.
-
On the Create Profile page, enter the following
information:
- Name: A unique identifier for the identity provider.
- Description: (Optional). A brief characterization
of the identity provider.Note:
You cannot change the icon and login button, in accordance with the provider's brand standards.
- Click Next.
-
On the Configure Connection page, enter the following
information:
- API key: The consumer key that you copied earlier from the identity provider. You can find this information on the Twitter Developers site.
- API secret key: The consumer secret that you copied earlier from the identity provider. You can find this information on the Twitter Developers site.
- Callback URL: The URL to which the user will be redirected after authenticating. This value is read-only. You’ll provide this value to the identity provider later.
- Click Save and Continue.
-
On the Map Attributes page, define how the PingOne user attributes are
mapped to identity provider attributes. For more information, see Mapping attributes.
- Enter the PingOne user profile attribute and the external IdP attribute. For more information about attribute syntax, see Identity provider attributes.
- To add an attribute, click + Add attribute.
- To use the expression builder, click Build and test or Advanced Expression. See Using the expression builder.
- Select the update condition, which determines how PingOne updates its user
directory with the values from the identity provider. The options
are:
- Empty only: Update the PingOne attribute only if the existing attribute is empty.
- Always: Always update the PingOne directory attribute.
- Click Save and Close.