SAML SSO Using PingIdentity as an IDP

user_2820641 0
Viewed 107

I am trying to use SAML sso with pingidentiy (pingone) and componentspace SAML library. Currently what I have to initiate the SSO is

 SAMLIdentityProvider.InitiateSSO(
                Response,
                "testuser", //username
                attributes,
                "https://sso.connect.pingidentity.com/sso/sp/initsso?saasid=xxxx-xxxx-xxxx-xxxx-xxxx&idpid=xxxx",
                "PingConnect"
            );

When this runs it returns an error in relay state. I've figured out that I don't have a relay state to use, but I am not sure where to specify my Initiate Single Sign-On (SSO) URL from my pingone web portal (thats the sso.connect url in the code). This is my first time doing SSO with SAML and using componentspace so I am completely lost.

I have my XML service provider setup as such

<PartnerServiceProvider Name="PingConnect"
        WantAuthnRequestSigned="false"
        SignSAMLResponse="true"
        SignAssertion="false"
        EncryptAssertion="false"
        AssertionConsumerServiceUrl="https://sso.connect.pingidentity.com/sso/sp/ACS.saml2"
        SingleLogoutServiceUrl="http://localhost:50839/"
        PartnerCertificateFile="sp.cer"
  SignatureMethod="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
saml single-sign-on c#
1 Answers

Just to confirm, PingIdentity is the identity provider and your application is the service provider? Assuming so, you should be calling SAMLServiceProvider.InitiateSSO and you should have a PartnerIdentityProvider rather than a PartnerServiceProvider configuration.

Have you taken a look at the PingOne Integration Guide? This describes both the configuration at PingOne and your application.

If you need further assistance, I suggest emailing ComponentSpace support.

user_15785380
Related