1.0 Overview
This article describes how to integrate Ping One with Fortanix-Data-Security-Manager (DSM) using SAML configuration.
2.0 Prerequisites
Fortanix DSM
Ping Identity installed and pre-configured on the user’s system
3.0 Configuration on Ping Identity
Log in to the Ping Identity admin page. ( https://admin.pingone.com/web-portal/login).
Figure 1: Ping Identity Admin Page
To create a new SAML application:
Go to the APPLICATIONS tab.
Click subtab My Applications.
Click the subtab SAML for configuring
Now click the Add Application dropdown, and then select New SAML Application
Figure 2: Create New SAML Application
In the Application details, enter the Application Name, Application Description, Category and update the Graphics icon as per your organization.
Figure 3: Enter Application Details
Click Continue to Next Step to go to the Application Configuration and update the following information as shown in the figure below:
Update the following information in the Ping Identity application:
Assertion Consumer Service (ACS): https://<FORTANIX_DSM_URL>/saml
Entity ID: https://<FORTANIX_DSM_URL>/saml/metadata.xml
Application URL: https:/<FORTANIX_DSM_URL>
Figure 4: Configure Ping Identity Application
Click Continue to Next Step for configuring SSO Attribute Mapping.
If you do not have any SSO Attribute Mapping, then click Continue to Next Step to configure Group Access.
Figure 5: SSO Attribute Mapping
Add the Group access for Domain Administrators and Users in the Directory.
Figure 6: Adding Group Access
Figure 7: Adding Group Access
Review the setup and download the SAML Metadata, and then click Finish.
Figure 8: Download SAML Metadata
Once done you will be able to find the application in the Ping Identity menu.
Figure 9: Application Added Successfully
4.0 Configuration on Fortanix Data Security Manager
Log in to the Fortanix DSM portal (https://<FORTANIX_DSM_URL>/).
In the Fortanix DSM left panel click the Settings tab, and then in the Authentication tab, select Single Sign On.
Figure 10: Select Single Sign On
Add the SAML integration, and upload the SAML file downloaded from the Ping identity.
Figure 11: Add SAML Integration
Customize the SSO, by adding a name and URL for the logo image.
Figure 12: Customize SSO
Once you have the Ping Identity SSO integrated successfully you will be able to see it as shown in the following screenshot.
Figure 13: Ping Identity Integrated in Fortanix DSM
Now, log out from Fortanix DSM and sign in using SSO.
Figure 14: Sign in using SSO
NOTE
Please ensure that the users who will log into Fortanix DSM are part of the Users list in ping Identity. A user can log in using Ping Identity SSO in Fortanix DSM only if the user's name is mentioned in the Ping Identity user domain.
Figure 15: Users added to Ping Identity