The IdentityIQ integration to PingFederate acting as the identity provider (IdP) for SSO authentication is a straightforward standards integration with the following caveats:

  • The IdentityIQ application requires that the assertion portion inside the SAML response message is always signed.
  • This system is tested with PingFederate 9.2 and higher and with IdentityIQ 7.3.