Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file modified assets/images/sso/ping-identity/2.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified assets/images/sso/ping-identity/3.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified assets/images/sso/ping-identity/4.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified assets/images/sso/ping-identity/6.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added assets/images/sso/ping-identity/7.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added assets/images/sso/ping-identity/issuer-url.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added assets/images/sso/ping-identity/select-ping.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added assets/images/sso/ping-identity/sso-attribute.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added assets/images/sso/ping-identity/sso-setup.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
57 changes: 32 additions & 25 deletions docs/lambdatest-sso-pingidentity-integration.md
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,6 @@ LambdaTest provides seamless integration with Ping Identity through SAML (Securi
## Key Features of Ping Identity Integration:
- **SP-Initiated SSO :** Single Sign-On initiated from the LambdaTest platform.
- **IdP-Initiated SSO :** Single Sign-On initiated from Ping Identity.
- **Group Assignment :** Manage user groups via Ping's group functionality.

## Prerequisites
Before configuring the integration, ensure you meet the following requirements:
Expand All @@ -55,13 +54,6 @@ Before configuring the integration, ensure you meet the following requirements:
- **SSO Enablement Request :** The admin of your LambdaTest organization must request SSO enablement.
> Raise a request via email at support@lambdatest.com or through LambdaTest’s 24/7 in-app chat support.
- **Ping Identity Admin Access :** You need administrative access to your Ping Identity account.
- **Metadata File :** Download the SAML metadata file for your LambdaTest organization using the following URL:

Replace `{organizationID}` with your organization's ID

```bash
https://auth.lambdatest.com/organization/{organizationID}/saml/metadata
```

## Configuring LambdaTest & Ping Identity Integration
Follow the steps below to configure the SAML-based integration between LambdaTest and Ping Identity.
Expand All @@ -71,31 +63,46 @@ Log in to your Ping Identity account using admin credentials.

<img loading="lazy" src={require('../assets/images/sso/ping-identity/1.png').default} alt="setup sso button" className="doc_img"/>

### Step 2: Add a New Application
- Navigate to the Applications menu on the toolbar.
- Click on Add Application.
<img loading="lazy" src={require('../assets/images/sso/ping-identity/2.png').default} alt="setup sso button" className="doc_img"/>
### Step 2: Setup SSO in LambdaTest

- In the Add Application window, select Create New App to create a new application for LambdaTest SSO integration.
<img loading="lazy" src={require('../assets/images/sso/ping-identity/3.png').default} alt="setup sso button" className="doc_img"/>
- Go to LambdaTest <a href="https://accounts.lambdatest.com/auth/sso">Authentication & SSO settings</a> and click on **Setup SSO**.
<img loading="lazy" src={require('../assets/images/sso-self-serve/setup-sso.png').default} alt="setup sso button" width="944" height="409" className="doc_img"/>

### Step 3: Import Metadata File
Import the LambdaTest metadata file you downloaded earlier.
- Enter Connection Name and Click on **Add New Connection**.
<img loading="lazy" src={require('../assets/images/sso-self-serve/connection-name.png').default} alt="connection name button" width="944" height="409" className="doc_img"/>

<img loading="lazy" src={require('../assets/images/sso/ping-identity/4.png').default} alt="setup sso button" className="doc_img"/>
- Select **PingFederate** as your identity provider (PingIdentity & PingFederate has identical setup from LambdaTest side).
<img loading="lazy" src={require('../assets/images/sso/ping-identity/select-ping.png').default} alt="select identity provider" width="944" height="407" className="doc_img"/>

Upon importing, Ping Identity will automatically populate the following:
### Step 3: Add a New Application in PingIdentity
- Navigate to the Applications menu on the toolbar.
- Click on Add Application.
<img loading="lazy" src={require('../assets/images/sso/ping-identity/2.png').default} alt="add application" className="doc_img"/>

- ACS URLs (Assertion Consumer Service URLs)
- Entity ID
- Save the application to proceed.
- In the Add Application window, select Create New App to create a new application for LambdaTest SSO integration.
<img loading="lazy" src={require('../assets/images/sso/ping-identity/3.png').default} alt="create new app" className="doc_img"/>

<img loading="lazy" src={require('../assets/images/sso/ping-identity/5.png').default} alt="setup sso button" className="doc_img"/>
### Step 4: Add SAML configuration
- In LambdaTest SSO setup copy the **ACS URLs** and **Entity ID**.
<img loading="lazy" src={require('../assets/images/sso/ping-identity/sso-setup.png').default} alt="ping-integration-sso-setup" width="944" height="487" className="doc_img"/>

### Step 4: Configure Attribute Mappings
- Go to the Attribute Mappings tab of the created application.
- In Pingidentity, select the **Manually Enter** option in **SAML Configuration** and enter **ACS URLs** and **Entity ID** copied from above step.
<img loading="lazy" src={require('../assets/images/sso/ping-identity/4.png').default} alt="setup sso button" className="doc_img"/>

### Step 5: Configure Attribute Mappings
- Copy following attribute from Lambdatest SSO setup.
<img loading="lazy" src={require('../assets/images/ping-identity/sso-attribute.png').default} alt="ping-integration-attribute-mapping" width="944" height="487" className="doc_img"/>
- Go to the Attribute Mappings tab of the created application in PingIdentity.
- Update the saml_object attribute value from user_ID to emailaddress.
- Add and update the other attributes
<img loading="lazy" src={require('../assets/images/sso/ping-identity/6.png').default} alt="attribute-mapping" className="doc_img"/>

### Step 6 : Upload Metadata URL & SSO Domain
- SSO Domains (Comma-separated list of the domains that can be authenticated in the Identity Provider.)
- Copy the **IDP Metadata URL** from PingIdentity
<img loading="lazy" src={require('../assets/images/sso/ping-identity/7.png').default} alt="ping-integration-idp-url" width="944" height="487" className="doc_img"/>

<img loading="lazy" src={require('../assets/images/sso/ping-identity/6.png').default} alt="setup sso button" className="doc_img"/>
- Go back to LambdaTest and paste the copied URL in the **Issuer URL** field and click on **Create Connection**:
<img loading="lazy" src={require('../assets/images/sso/ping-identity/issuer-url.png').default} alt="sso-self serve" width="945" height="542" className="doc_img"/>

After completing these configurations, your LambdaTest and Ping Identity integration for SSO will be ready to use. Both SP-initiated and IdP-initiated SSO flows will be enabled, and you can manage users and groups via Ping Identity.
Loading