Enabling additional configuration options - PingFederate

Use Cases

bundle: solution-guides
ft:publication_title: Use Cases
Product_Version_ce
category: ContentType; howtodoc
ContentType_ce: How-to

Use the same service endpoint connection to service all of the web applications hosted on SharePoint Server.

Open the SharePoint Management Shell.

To enable the wreply parameter for the Trusted Identity Provider, run the following commands.

$tit = Get-SPTrustedIdentityTokenIssuer
<PingFederate_Trusted_Identity_Provider_Name>
$tit.UseWReplyParameter = $true
$tit.Update()

Configure Valid Domain Names.
1. In the PingFederate Admin console, open the connection for your SharePoint server.
2. Go to Protocol Settings > Service URL.
3. In the Valid Domain Name field, enter the domain name.
  
  Note:
  If you have several web applications with a common domain name, such assales.pingdemo.com or support.pingdemo.com, and if you require extra security, add them to the list. Otherwise, to cover these and future URLs with a similar format, add the domain name with a leading wildcard (*.pingdemo.com).
4. Select the Require HTTPS and Allow Any Query/Fragment check boxes. Click Add.
5. Click Save.