Single sign-on · Setup guides

Set up a SAML application in PingOne and connect it to OrbitID. You need a PingOne administrator account.

Step 1: Create application

From your PingOne account, click Connections > Applications from the left navigation menu.

If your application is already created, choose it from the list and move to the next step.

If you haven't created a SAML application, click the plus button to create a new application.

Give your application an Application Name, choose SAML Application from the Application Type and click Configure.

Step 2: Configure application

From the next screen, you have to enter the following values in the SAML Configuration section:

ACS URLs

https://app.orbitid.com/api/oauth/saml

The ACS URL shown in your OrbitID Configuration page. Sandbox uses https://app.orbitid.com/api/oauth/sandbox/saml.

Entity ID

https://saml.orbitid.com

The SP Entity ID shown in your OrbitID Configuration page. Sandbox uses https://saml.orbitid.com/sandbox.

Click Save to save the configuration.

Step 3: Attribute mapping

Click the Attribute Mappings tab from the top and configure the following attributes:

Make sure you have enabled your app so that it can be used by the users. You can do this by clicking the Toggle button next to your app.

Step 4: Download the IdP metadata

Click the Configuration tab from the top and click Download Metadata to download the metadata XML file. The same tab shows the IDP Metadata URL, which you can use instead of the file.

Finish in OrbitID

Finish in OrbitID: paste the IdP metadata URL or XML into the connection form (or the Admin Portal link). In the dashboard, open the environment, go to Connections, click New connection, choose SAML and paste the metadata URL or the XML you downloaded. If your customer's admin is following an Admin Portal link, they paste it into the final step of the portal instead.

You can also create the connection with the API: POST /api/v1/sso as described in the quickstart.