How to validate the PingOne configuration in order to establish a successful connection with the Orchestrator?
About PingOne
- PingOne is a cloud-based Identity Platform from Ping Identity that offers Single Sign-On (SSO) and Multi-Factor Authentication (MFA) capabilities. It provides users with a seamless authentication experience, enhancing security and productivity by enabling them to securely access all their applications using just one set of credentials.
- UiPath Orchestrator can be integrated with PingOne to facilitate SSO authentication.
Validation Steps
- To check if the Orchestrator can configure PingOne SSO successfully, apply a trial account in pingidentity.com, and then set up the configuration as elaborated in the following documentation - PingOne Authentication.
-
Ensure the attribute mapping is using 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress'. Utilizing 'input' instead could potentially lead to an error.
-
The PingOne signing certificate should be downloaded and appropriately placed in both the personal folder and trusted root folder available in Certificate Management within the Orchestrator machine. This step is crucial for secure and verified communication. (Adding Certificates to the Certificates Store)
-
To maintain synchronization, create a user with the same email address in both Pingone and Orchestrator. This consistency facilitates smoother functioning and user identification.