---
title: Configuring SailPoint IdentityIQ with PingDirectory and PingFederate
description: This document describes how to integrate PingDirectory and PingFederate with SailPoint IdentityIQ.
component: solution-guides
page_id: solution-guides:single_sign-on_use_cases:htg_config_sailpoint_identityiq_pd_pf
canonical_url: https://docs.pingidentity.com/solution-guides/single_sign-on_use_cases/htg_config_sailpoint_identityiq_pd_pf.html
revdate: July 18, 2022
page_aliases: ["single_sign-on_use_cases:htg_config_sailpoint_identityiq_pd_pf_ldaps.adoc", "single_sign-on_use_cases:htg_config_sailpoint_identityiq_pd_pf_saml.adoc"]
section_ids:
  components: Components
  implementing-saml-based-sso-with-pingfederate-and-identityiq: Implementing SAML-based SSO with PingFederate and IdentityIQ
  implementing-an-ldaps-connection-with-pingdirectory-and-identityiq: Implementing an LDAPS connection with PingDirectory and IdentityIQ
---

# Configuring SailPoint IdentityIQ with PingDirectory and PingFederate

This document describes how to integrate PingDirectory and PingFederate with SailPoint IdentityIQ.

## Components

* PingDirectory 7.3

* PingFederate 9.2

## Implementing SAML-based SSO with PingFederate and IdentityIQ

Configure PingFederate and IdentityIQ to implement SAML-based single sign-on (SSO).

The IdentityIQ integration to PingFederate acting as the identity provider (IdP) for SSO authentication is a straightforward standards integration with the following caveats:

* The IdentityIQ application requires that the assertion portion inside the SAML response message is always signed.

* This system is tested with PingFederate 9.2 and higher and with IdentityIQ 7.3.

## Implementing an LDAPS connection with PingDirectory and IdentityIQ

Configure PingDirectory and IdentityIQ to implement an LDAP over SSL (LDAPS) connection from IdentityIQ to PingDirectory.

The IdentityIQ LDAPS integration to PingDirectory is a straightforward integration with the following caveats:

* PingDirectory must use a trusted certificate.

* IdentityIQ only supports the simple authentication bind mechanism.