Ensure that:
- PingFederate is installed and running.
- You have an identity provider's (IdP) SAML or OIDC metadata.
- You have configured an Identifier First Adapter instance. For more information, see Configuring an Identifier First Adapter instance.
- You have configured an HTML Form Adapter. This can be any authentication adapter, such as Kerberos or X.509. For more information, see Configuring an HTML Form Adapter instance.
You create policy contracts in the PingFederate administrative console.
- Go to and click Create New Contract.
- On the Contract Info tab, in the Contract Name field, enter a name for the contract. Click Next.
- On the Contract Attributes tab, extend the contract if desired. Click Next.
- On the Summary tab, review your configuration and click Done.