PingFederate

Security Requirements and Controls

PingFederate serves as a global authentication authority that allows any user to access securely LogScale. It integrates with identity standards like SAML, OAuth, and OpenID Connect.

Important

For Cloud customers, please gather the information on Authentication & Identity Providers, and contact Support, and they can work with you to setup your chosen IdP service.

To configure the PingFederate for integration with LogScale:

  1. First complete the instructions in Creating an SP Connection with your IdP PingFederate. From SP Connections, select the SP Connection.

  2. Then navigate to Browser SSO → Configure Browser SSO → SAML Profiles tab. From the list of profiles shown there, select SP-INITIATED.

  3. Click Next twice, and go to Configure Assertion Creation → Attribute Contract. At that point you'll add email as the Attribute Contract.

  4. From SP Connections, select SP Connection, then go to Browser SSO → Protocol Settings → Configure Protocol Settings → Allowable SAML Bindings.

  5. You'll then see a list of options. Select REDIRECT and click Save.

  6. Now, click Server Configuration → Administrative Functions → Metadata Export. Then click Next.

  7. Select SP Connection again and click Next. Then select the Signing Certificate, and click Next.

  8. At this point, a metadata file has been generated. This file holds information you will need to set up LogScale to communicate with PingFederate. Export that file and then click Done.

You're now ready to configure LogScale, using the metafile you just exported.

To configure LogScale on your own server, see Configuring LogScale.

To use SAML with LogScale Cloud, go to the Authentication & Identity Providers documentation page.

See the Ping Identity Documentation for more information on PingFederate.