PingOne

Below is a step-by-step guide for connecting your PingOne account to Flow Enterprise Server with SSO.

1. Follow the steps to add an application to PingOne (external site, opens in new tab).

   1. Set the application type to SAML application.

2. Either copy the XML metadata file or the metadata URL.

3. In another tab, open Flow.

4. From the top navigation, click Settings.

5. In the left navigation, click SSO under User Management.

6. Click Add SAML integration.

7. In the Configure SAML modal, paste the copied metadata file or URL into the Metadata field.

8. Fill in the Entity ID/Sign in URL field with the URL you'll use to log in with after you configure your integration. You can use your organization name or something else, but it must be unique. Copy this Entity ID/Sign in URL.

9. Copy the Entity ID/Sign in URL from Flow.

10. In the Full name field, input FirstName LastName. This field is case sensitive and must match this input exactly.

11. In the Email field, input Email. This field is case sensitive and must match this input exactly.

12. Complete these optional settings as needed:

    1. Role Key: Fill out this field if you want user roles to be mapped from the attribute value assertion via this key.

    2. Manage Roles within Flow: Check this box if you want Flow to manage your user’s role. New users are given a default role upon logging in.

    3. Merge New Users on Email: Check this box if you already have users invited into your Flow account using non-SSO logins. This automatically deletes the previous logins and forces all existing users to log in via your SSO platform.

13. In PingOne, input the Entity ID/Sign in URL from Flow in both the Entity ID and ACS URLs fields.

14. Click Save.

15. Next, add attributes to your application. Learn more about editing an application (external site, opens in new tab). Add the following attributes, and map them as needed. These fields are case sensitive and must match the following inputs exactly:

    1. FirstName

    2. LastName

    3. Email

    4. Roles (only if you plan to handle roles in PingOne)

16. If you have the option, select GetLocalPartFromEmail.

17. Make sure all attributes, except Roles, are required.

18. Click Save and Continue.

19. Configure your application access controls (external site, opens in new tab) as desired.