Security Performance Management
Continuous Monitoring
Cyber Insurance
National Cybersecurity

Articles in this section

See more

PingOne Single Sign-on (SSO) Setup

Avatar
Ingrid
Follow
Publication Date – November 18, 2019

Once the Bitsight SAML app has been configured via PingOne, use the following instructions to set up single sign-on (SSO) in the PingOne application:

  1. Signing Algorithm: Select the “RSA_SHA256” signing algorithm option or higher.
  2. Configure Your Connection: The default ACS URL, Entity ID, Single Logout Endpoint, and Single Logout Response Endpoint are preconfigured. They do not need to be changed for the application to work.
  3. Default PingOne Dock URL: Customize your PingOne dock URL, as needed.
  4. Attribute Mapping: Map the appropriate user attributes with fields. The default Bitsight values are shown in SAML Metadata Attributes. Assign the “SAML_SUBJECT” option, unless your company has specific mappings. Do not specify any advanced “NameFormat” for it.
    pingone_attributes2.png

    Important: You will need to individually set format:uri for the First Name, Last Name, and Email fields. Select the “Advanced” option for each field. In the pop-up that follows, click in the “NameFormat” box and select the “urn:oasis:names:tc:SAML:2.0:attrname-format:uri” option.

    advanced_attributes.png
  5. PingOne App Customization - Bitsight: Click Save & Publish.
  6. Review Setup: You may wish to bookmark your “Initiate Single Sign-On (SSO)” URL. Although, SSO is typically handled directly through the PingOne platform.
  7. Download the SAML Metadata for your configured Bitsight Application.
  8. Configure Your Bitsight Organization for SAML Access:
    1. Log in to the Bitsight platform with your administrative account.
    2. Go to the SAML page.
    3. Paste the contents of the SAML metadata that was downloaded from PingOne into the text box.
    4. Take note of your SAML login URL, shown in the SAML page.
    5. Check the “Enable SAML for the account” checkbox.
    6. Log in to Bitsight using SAML from PingOne. You may use the PingOne SSO URL, the PingOne portal, or the Bitsight-provided SAML login URL to initiate your first SAML-based login.

Once your login is successful, SAML will be enabled company-wide for any other Bitsight user accounts.

Related articles