SSO Configuration: eSpatial & Ping Identity

Integrate eSpatial with Ping Identity

In this article, we list the steps required to connect your eSpatial account with your corporate Ping Identity account.  

1. Login to Ping Identity
2. Select Configure application in configure Single Sign-On section
   
   
3. In "My Applications" select "Add Application"
   
   
   
   
4. Select New SAML Application
   
   
5. Fill Application Name, Description, then select Continue to Next Step
   
   
   
6. Login to eSpatial, click on your name in the top right corner of eSpatial and select "Manage Groups and Users". Click on the SSO Configuration link. Copy content of Service Provider Metadata to an XML file
   
   
   
   
7. In Ping Identity, to download Identity provider metadata, select the "Download" link next to SAML Metadata and save Identity Provider Metadata to xml file.
   
   This will be needed later to enable SSO in eSpatial. Select button "Select File" next to "Upload Metadata" and upload the eSpatial service provider xml metadata file created in previous step #6
   
8. Remove checkbox next to Encrypt Assertion and ensure Sign Assertion is selected 
9. Continue to Next step
   
10. Complete the attributes mapping and select "Continue to Next Step"
    
    
    
11. No action is required on this screen, simply clicm on "Continue to Next Step"
    
    
    
    
12. Review the overview of settings. Select "Finish" if all appears correct.
    
    
    
13. Return to eSpatial to enable SSO. Use Identity Provider xml file (Ping Identity metadata). Select Choose File next to Identity Provider XML Metadata select admin user email address and leave Manage security groups by identity provider unchecked.
    
    
    
14. Then select Enable SSO
15. 15. Your eSpatial account should now be linked to your Ping Identity account. To access eSpatial you will now require Ping Identity authentication.