Ping Identity Usage Integration

Created by Shubham Saxena, Modified on Thu, 11 Jul at 1:14 AM by Abinaya Ramakrishnan

Overview

Spendflo provides SAML 2.0 integration to its user base, who use Ping Identity as their IAM solution. With this integration, the users will be able to login to Spendflo seamlessly with their Ping Identity account. o.


Follow the steps mentioned in this article to install Ping Identity on Spendflo.


Configuration in Ping Identity

Create a new application on Ping Identity


Inside Ping Identity Console, click on Applications. Then click the Add button to create a new Application.



Select application type


Enter the Application details and select SAML Application as the Application Type. Then click "Configure".




Enter details


Select "Manually Enter" and enter the following details

  • ACS URL - https://auth.spendflo.com/auth/saml/callback
  • Entity ID - production



Edit configuration

Once added, go to the configuration tab and edit the configuration.




Update configuration

Select the SUBJECT NAMEID FORMAT as format:emailAddress




Attribute Mappings


Select the Attribute Mappings tab. For the saml_subject attribute, select Email Address as the PingOne Mappings.



Configuration in Spendflo for Ping


Once you have configured the credentials in Ping Identity, follow the steps here to complete the integration of Spendflo and Ping Identity.


Update Settings


1. Inside Spendflo, go to Settings in the top Navigation Bar.



2. Select Users in the left nav and go to Edit User Role



2. Select SSO in the left navigation and then click Setup SSO Connection



Configure Custom SAML

1. Click Custom SAML Application



2. Click Configure Manually



Get Credentials from Ping Setup

1. Go to PingIdentity, select the Spendflo application that you just configured. Get the Single Sign-on Service URL and download the Signing Certificate



2. Paste the Single Signon Service URL from Ping in the SSO Endpoint. And paste the certificate that you just downloaded into Public Certificate



3. Once completed, click Continue to Claim Domain



Enter domain name in Spendflo App


1. Come back to Spendflo and enter the domain name of your organisation. In the screenshot below, replace spendflo.com with your email domain using when you will be logging in to Spendflo then click "Proceed"



2. Claim the domain by adding the given TXT record to the DNS settings in your DNS provider.



3. Once validated, your domain is setup and the SSO configuration is complete.



Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article