When a company is using PingFederate, an extra parameter needs to be set to allow SSO to work with Vyopta.
When at the application settings in PingFederate, the admin should scroll down to "Protocol Settings" and click on the "Assertion Consumer Service URL" link as seen below:
Once at the Assertion Consumer Service URL page, click on "Show Advanced Customizations":
Then, add a new customization. The Message Type should be "ResponseDocument" and the expression should be as follows:
#element = #XmlHelper.getFirstChild(#ResponseDocument),
#XmlHelper.setAttribute(#element, 'Destination', "https://login.vyopta.com/auth/realms/<realm_name>/broker/saml/endpoint
The End Result should look as follows:
Now, admin should save and push changes.
Comments
Please sign in to leave a comment.