Configure Cayosoft Administrator for authentication with Ping

Overview

Cayosoft Administrator introduces the Ping extension to allow for the user authentication and single sign-on in the Web Portal. This article covers the steps to configure Cayosoft Administrator and your PingFederate instance to allow for single sign-on authentication in the Web Portal.

 

Setup considerations

To ensure the correct operation of the Ping integration in Cayosoft Administrator, set up the following items in your PingFederate deployment:

• Create a dedicated OAuth client for the integration.

• In a hybrid environment, configure the AD anchor attribute.

• Map an anchor value to the identity attribute in the token attribute contract for the access token.

 

OAuth client configuration

Create a dedicated OAuth client for the Ping integration. Refer to the following table to learn more about the required client settings:

NOTE: Copy the client ID and client secret before saving the client.

Setting name	Required value
Client authentication	Client secret
Redirect URIs	Specify the external Web Portal URL to follow the provided structure: %https://Web_Portal_External_URL%/cayosoftwebadmin/externalsignin
Allowed grant types	Authorization code

Set up the rest of the OAuth client settings as required.

 

Hybrid environment configuration

In hybrid environments, the userPrincipalName AD attribute must be used for the AD anchor attribute and added to the token mappings.

 

Access token mappings configuration

To ensure the user accounts are identified correctly between the platforms, an anchor to link to identity attributes in accounts is required. In the Access Token Mappings settings in PingFederate, add the anchor to the access token mappings and map it to an identity attribute used in your environment (e.g., mail, userPrincipalName, etc.).

 

Extension configuration

After you configure the OAuth client and anchor value, navigate to the Cayosoft Administrator console to set up the extension. Refer to the following steps:

1. In the Cayosoft Administrator console, navigate to Home > Configuration > Connected Systems Extensions > Ping.

2. Select the Enable checkbox.

3. In the Ping base URL field, specify the base URL of your PingFederate instance.

   NOTE: Locate the base URL value in System > Server > Protocol Settings menu of PingFederate.

4. In the Client credentials section, click the three-dot button and specify the OAuth client ID and client secret. Click OK to save the changes.

5. In the Advanced settings section, review the default anchors and edit them, if necessary, to correctly map them between PingFederate and Cayosoft Administrator. Click Save changes to complete the extension setup.

6. Navigate to Home > Configuration > Web Portal > Web Portal Settings. In the User sign-in settings, set the User sign authentication method value to Automatic sign-in (SSO) for Ping account.

7. Click Save changes to complete the Web Portal setup.