Skip to content
Products
/
/
/
Configuring Values for Pi...
Last updated

Configuring Values for Pingone for Enterprise SSO

You can configure values for PingOne for Enterprise in Identity Federation in TD Console. You must first configure a PingOne application.

Limitations

Implementing Identity Federation will disable account users who currently sign-in to TD Console using Google SSO.

Configuring Your Values for PingOne for Enterprise

  1. Open TD Console.

  2. Select the Control Panel.

  1. Select Sign-in Settings.

The following fields are pre-populated:

  • Account Name

  • Entity ID

  1. Select the Edit tool. The Edit Identity Federation dialog opens.

  1. Select PingOne for Enterprise as the Identity Provider Name.

  1. You can configure Identity Federation with one of the following methods:

    1. Uploading a metadata XML file

    2. Configuring the fields manually with an X.509 certificate .crt file, a sign-in URL, and a sign-out URL.

This information is available to be downloaded by you when you configure your connection on PingOne for Enterprise.

Upload a Metafile
Drag or Browse for the XML metafile downloaded from PingOne.

Configuring Manually
Enter the PingOne information in the following fields.

  • Sign-in Endpoint URL : The IdP URL that the user uses to sign into Treasure Data. Obtained from your IdP.

  • Sign-out Endpoint URL : The IdP URL that the user is in when they sign-out of Treasure Data. Obtained from your IdP.

  • Certificate File: Privacy Enhanced Mail Certificate file. Upload the .pem generated certificate from the IdP to validate the SAML response from the IdP to Treasure Data. Obtained from your IdP during set up.

  1. Select Save.

Add New User to PingOne for Enterprise Identity Federation

  1. After Identity Federation has been configured, navigate to Control Panel > Users.

2. Select Add User from the Action menu in the upper right corner.

  1. The Add User dialog opens. Type in the user’s email address. Select PingOne for Enterprise from the Sign-in Method dropdown. Select Same as email address as the Unique Identifier. Select Add.

4. On the Sign-In Settings page, select Copy Console Sign-in URL.

5. This URL directs enrolled TD users to the correct sign-in page.

Add Existing Users to PingOne Enterprise Identity Federation

  1. After Identity Federation has been configured, navigate to Control Panel > Users.

2. Select the User to enroll. Select edit pencil under Personal Info.

  1. The Edit Personal Info dialog opens. Select PingOne for Enterprise under Sign-in Method. Select Save.

4. On the Sign-In Settings page, select Copy Console Sign-in URL.

5. This URL directs enrolled TD users to the correct sign-in page.

Previous page
Next page