Step 4. Get issuer from PingFederate Server

This section describes how to obtain the Issuer value from the PingFederate server. The Issuer uniquely identifies the PingFederate instance in SAML or OIDC transactions and is required when configuring trust relationships and validating authentication responses between integrated systems.

About this task

  1. Login as PingFederate Administrator

    • Access the PingFederate Admin Console (e.g., https://pingfederate.example.com:9999/pingfederate/app)

  2. Navigate to Server Configuration

    • Go to System → Server → Protocol Settings
    • Or navigate to IdP Configuration → General Info

  3. Copy the Entity ID

    • Under SAML 2.0 Entity ID or Federation Info, find the Entity ID

    • Copy the Entity ID as issuer

      • Example: https://pingfederate.example.com
      • Or: pingfederate:entityid:example

      Note: The Entity ID obtained here must match the issuer value in the saml_credentials.json file to ensure proper SAML authentication.

  4. Alternative Method - Via Metadata

    • Navigate to IdP Configuration → SP Connections → Select your connection
    • Click on Export Metadata
    • In the metadata XML, find the entityID attribute in the <EntityDescriptor> tag
    • Example: 
      <EntityDescriptor
              entityID="https://pingfederate.example.com">