Skip to main content

Connect Ping Identity

note

SSO connectors are available on the enterprise plan and use OpenID Connect (OIDC).

This guide walks through creating an application in PingOne and adding it to your workspace as an SSO provider. Once connected, the provider can be used to restrict access to your Channels.

note

Authorization for Channel SSO happens entirely in Ping Identity. Assign the users who should have access to this application, and they'll be automatically authorized to view the Channel as soon as they can sign in — Viostream doesn't apply any further access controls on top of this.

Please note that Ping's admin console changes from time to time — if any of the following steps don't match what you see, consult Ping Identity's documentation or contact Customer Success via the Live Chat for assistance.

Step 1: Add a new application​

  1. Sign in to your PingOne admin console.
  2. Navigate to Applications > Applications.
  3. Click + Add Application.
  4. Give the application a name (e.g. Viostream).
  5. Select OIDC Web App as the application type, then click Save.
  6. Under Configuration, click the edit icon and set Redirect URIs to https://id.app.viostream.com/oauth2/callback.
  7. Save your changes and toggle the application to enabled.

Step 2: Add the required scopes​

  1. On the application, go to the Resources tab.
  2. Confirm the openid, profile and email scopes are enabled for the application. Add any that are missing.

Step 3: Collect your credentials​

  1. From the application's Configuration tab, copy the Client ID and Client Secret.

  2. Your Issuer URL can be found under your environment's Authentication > OpenID Connect metadata (the issuer value from the .well-known/openid-configuration document), typically in the form:

    https://auth.pingone.com/{environmentId}/as

Step 4: Add the provider in Viostream​

  1. Navigate to Connectors in the  Settings page.
  2. Click Connect on the Ping Identity card under Single Sign-On.
  3. Enter your Issuer URL, Client ID, Client Secret and the Email Domain you wish to associate with this provider (e.g. viostream.com).
  4. Click Save.

Your Ping Identity provider is now available to use with your Channels and other features as they become available.

Rotate your Client Secret​

Client secrets should be rotated periodically, or immediately if you suspect a secret has been exposed.

  1. In the PingOne admin console, open your application's Configuration tab and generate a new Client Secret.
  2. In Viostream, navigate to Connectors in the  Settings page, open the connected Ping Identity card, and update the Client Secret field with the new value, then click Save.
  3. Once you've confirmed sign-in still works with the new secret, return to PingOne and remove the old one.
How a viewer signs in via Ping Identity once the connector is set up

See also​