Setting up SAML 2.0 SSO App on Ping

SSO Admins can follow the steps in the guide to configure SAML single sign-on for the FranklinCovey Impact Platform with Ping. Find more detailed information from Ping Identity about setting up SAML single sign-on in their interface. Please note: You will likely need the proper administrative privileges to follow the configuration instructions.

Setting up SAML single sign-on requires you to configure settings on Ping and the Admin Platform. Start by creating the FranklinCovey app in Ping. Then you can use your metadata to configure the Admin Platform SSO Management page settings using the instructions linked at the end of the article

1. Open your Ping Identity dashboard in a separate tab

2. Select CONNECTIONS

3. Select + Add Application

4. Select WEB APP. Then, in the SAML row, select Configure

5. Fill in the Application Name (e.g. FranklinCovey) and Description (e.g., FranklinCovey All Access Pass).

6. Select Next.

7. Under ACS URLs, enter

   https://fidm.eu1.gigya.com/saml/v2.0/3_qOYUNdOudAGL3G4sZTUMpeCGVgPM3tSDjIgpJR5nGVPIRyrxSvX2zWd4_CsaeFq1/sp/acs

8. Under ENTITY ID, enter

   https://fidm.gigya.com/saml/v2.0/3_qOYUNdOudAGL3G4sZTUMpeCGVgPM3tSDjIgpJR5nGVPIRyrxSvX2zWd4_CsaeFq1

9. Select Download Signing Certificate and select X509 PEM (.crt).

   

10. Under SIGNING ALGORITHM, make sure RSA_SHA256 is selected.

11. Under ASSERTION VALIDITY DURATION (IN SECONDS), enter 60.

12. Select Save and Continue

13. Under PINGONE USER ATTRIBUTE, select Email Address.

14. Add an Email Address attribute

    1. Select +ADD ATTRIBUTE

    2. Select PingOne Attribute

    3. Under PINGONE USER ATTRIBUTE, select Email Address

    4. Under APPLICATION ATTRIBUTE, enter email

    5. Check the box next to Required

15. Add a First Name attribute

    1. Select +ADD ATTRIBUTE

    2. Select PingOne Attribute

    3. Under PINGONE USER ATTRIBUTE, select fname

    4. Under APPLICATION ATTRIBUTE, enter firstName

    5. Check the box next to Required

16. Add a Last Name attribute

    1. Select +ADD ATTRIBUTE

    2. Select PingOne Attribute

    3. Under PINGONE USER ATTRIBUTE, select lname

    4. Under APPLICATION ATTRIBUTE, enter lastName

    5. Check the box next to Required

17. Select Save

NEXT STEP: Now that you have successfully created a new SAML 2.0 SSO app on Ping, refer to the Enabling SAML Single Sign-on for FranklinCovey Site help article to input your metadata and enable SSO on the Impact Platform.