> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dqlabs.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Ping Identity

> Step-by-step guide to configuring Ping Identity as the SAML 2.0 identity provider for single sign-on into Prizm.

<script type="application/ld+json">
  {`{
            "@context": "https://schema.org",
            "@type": "TechArticle",
            "headline": "Ping Identity SSO",
            "description": "Step-by-step guide to configuring Ping Identity as the SAML 2.0 identity provider for single sign-on into Prizm.",
            "url": "https://docs.dqlabs.ai/security/sso/ping-identity",
            "publisher": {
              "@type": "Organization",
              "name": "DQLabs Inc",
              "logo": "https://media.brand.dev/332adc35-5bc4-4d2b-bf78-256aa4a5e414.svg"
            }
            }`}
</script>

## Overview

This guide describes how to configure **Ping Identity (PingFederate or PingOne)** as the SAML 2.0 Identity Provider (IdP) for PRIZM.

## Prerequisites

Before you begin, ensure you have:

* Ping Identity Administrator privileges
* Permission to create SAML applications
* PRIZM Administrator access
* PRIZM Service Provider (SP) details:
  * Entity ID
  * ACS URL
  * Sign-on URL

## Step 1: Configure Ping Identity

1. Log in to the Ping Identity Admin Console.
   <Frame>
     <img src="https://mintcdn.com/dqlabs/XQsoZNdlCRuYucXP/images/image-49.png?fit=max&auto=format&n=XQsoZNdlCRuYucXP&q=85&s=c27bbe540d7b6fd85c37e8b60f0b6b06" alt="Image" width="1142" height="250" data-path="images/image-49.png" />
   </Frame>
2. Navigate to: **Applications → Add Application**
3. Create a new **SAML Application** named **PRIZM**.
   <Frame>
     <img src="https://mintcdn.com/dqlabs/XQsoZNdlCRuYucXP/images/image-50.png?fit=max&auto=format&n=XQsoZNdlCRuYucXP&q=85&s=62174cb0851d84f471f8efb7aa699a2d" alt="Image" width="1065" height="401" data-path="images/image-50.png" />
   </Frame>
4. Configure the application manually using the values available in **PRIZM → Profile → Organization → SSO/SAML**.

| Ping Field  | PRIZM Value |
| :---------- | :---------- |
| ACS URL     | ACS URL     |
| Entity ID   | Entity ID   |
| Sign-on URL | Sign-on URL |

<Frame>
  <img src="https://mintcdn.com/dqlabs/XQsoZNdlCRuYucXP/images/image-51.png?fit=max&auto=format&n=XQsoZNdlCRuYucXP&q=85&s=a6df3400b0a86b877082fd86c1b7dd3d" alt="Image" width="808" height="193" data-path="images/image-51.png" />
</Frame>

5. Configure the required attribute mappings:

| PRIZM Attribute     | Ping Attribute |
| :------------------ | :------------- |
| emailaddress        | Email Address  |
| username            | Username       |
| givenname           | Given Name     |
| surname             | Surname        |
| groups *(optional)* | Groups         |

<Frame>
  <img src="https://mintcdn.com/dqlabs/XQsoZNdlCRuYucXP/images/image-52.png?fit=max&auto=format&n=XQsoZNdlCRuYucXP&q=85&s=aeb01c4a307193e3bf23126893296d8c" alt="Image" width="1066" height="412" data-path="images/image-52.png" />
</Frame>

6. Save the application and enable the toggle button at the top.

<Frame>
  <img src="https://mintcdn.com/dqlabs/XQsoZNdlCRuYucXP/images/image-53.png?fit=max&auto=format&n=XQsoZNdlCRuYucXP&q=85&s=a69b4d6379d0c87320b18ce78dd07bc0" alt="Image" width="1143" height="583" data-path="images/image-53.png" />
</Frame>

## Step 2: Configure PRIZM

1. Open the configured PRIZM application in Ping Identity.
2. Download the **Federation Metadata XML**.
3. In PRIZM, navigate to: **Profile → Organization → SSO/SAML**
4. Enable **Single Sign-On**.
5. Select **Ping Identity**.
6. Upload the Federation Metadata XML.
7. Click **Save**.

<Frame>
  <img src="https://mintcdn.com/dqlabs/XQsoZNdlCRuYucXP/images/image-54.png?fit=max&auto=format&n=XQsoZNdlCRuYucXP&q=85&s=52c138811b197f4198887997fc205022" alt="Image" width="1190" height="551" data-path="images/image-54.png" />
</Frame>

## Step 3: Assign Users

In Ping Identity:

* Open the PRIZM application and go to Access tab.
* Assign the required users or groups.
  <Frame>
    <img src="https://mintcdn.com/dqlabs/XQsoZNdlCRuYucXP/images/image-55.png?fit=max&auto=format&n=XQsoZNdlCRuYucXP&q=85&s=0ecc19b5f08a2579346468f63071453f" alt="Image" width="1048" height="547" data-path="images/image-55.png" />
  </Frame>

In PRIZM:

* Go to access page and enable SSO for the users

Users must be assigned before testing SSO.

## Step 4: Test Login

1. Open the PRIZM login page.
2. Select **Sign in with SSO**.
3. Enter your corporate email address.
4. Authenticate using Ping Identity.

After successful authentication:

* Existing PRIZM users are signed in.
* New users are automatically created during their first login (JIT provisioning).
* Roles are assigned automatically based on incoming group mappings.

### SCIM Provisioning (Optional)

1. Open the PRIZM application.
2. Navigate to **Provisioning / SCIM**.
3. Configure:
   * SCIM Endpoint
   * Bearer Token
4. Save.
5. Enable provisioning.
6. Assign users/groups.