Configuring a PingOne for Enterprise SAML Connection for CyberArk PVWA
Set up SAML using PingOne for Enterprise for CyberArk Password Vault Web Access (PVWA).
Before you begin
You must have the following information from your CyberArk and PingID environments to configure a SAML connection in PingFederate or PingOne for Enterprise:
-
CyberArk’s SAML Entity ID (Audience Value).
In the step-by-step SAML configuration, the value of
PasswordVaultis used. -
CyberArk’s Assertion Consumer Service (ACS) URL (POST Method). In this step-by-step SAML configuration example, the following values are used:
-
A PingID registered account.
-
The PingID properties file. For more information, see Download the PingID properties file.
Steps
-
Go to Applications → My Applications → SAML.
-
In the Add Application list, select New SAML Application to open the New Application window configuration.
-
In the Application Details workflow:
-
Complete the Application Name, Application Description, Category, and Graphics fields.
-
Click Continue to Next Step.
-
-
In the Application Configuration workflow:
-
Click I have the SAML configuration.
-
Enter the Assertion Consumer Service (ACS) value.
-
Enter the Entity ID value.
-
Click Continue to Next Step.
-
-
In the SSO Attribute Mapping workflow:
-
Enter the Identity Bridge Attribute or Literal Value value.
This is the user value that identifies a CyberArk user.
-
Click Save & Publish.
-