Configure Ping Identity SSO

PingOne is the single sign-on solution of Ping Identity. It helps IT organizations scale and secure their user base easily, across different platforms. Opsgenie supports Single Sign-On with PingOne, which means your organization can easily incorporate Opsgenie into your application base in PingOne and let your users securely access Opsgenie.

For general information about Opsgenie's Single Sign-On feature, refer to the Single Sign-On with Opsgenie document. This document describes the specific instructions you can use to integrate PingOne with Opsgenie SSO.

To configure Single Sign-On integration between your PingOne and Opsgenie accounts, go to Opsgenie SSO page, select "Ping Identity" as provider and follow the instructions.

PingOne Integration Instructions

• Login to PingOne as admin and go to Applications page. Under "Application Catalog" tab, search and find "Opsgenie". Click "Setup".

• Copy the idpid from the end of the "Single Sign-On (SSO) URL" field. It's the part after "idpid=".

• Click "Download" of the Certificate field and download the certificate file.

• Now in another tab go to Opsgenie SSO page.

• Set the "SAML 2.0 Endpoint" field as https://sso.connect.pingidentity.com/sso/idp/SSO.saml2?idpid=${IDPID} where you replace ${IDPID} with the idpid you copied earlier.

• For single logout, set the "SLO Endpoint" field as https://sso.connect.pingidentity.com/sso/SLO.saml2

• Paste the contents of the certificate file you downloaded earlier, into the "X.509 Certificate" field.

• Copy the SSO id provided by Opsgenie.

• In PingOne, click "Continue to Next Step".

• Replace the ${OpsgenieSSOiD} in the "ACS URL" with the sso id you copied from Opsgenie.

• For single logout, replace the ${OpsgenieSSOiD} in the "Single Logout Endpoint" url with the sso id you copied.

• Click "Continue to Next Step" twice and then click "Save & Publish".

• In Opsgenie, click "Apply SSO Settings". Remember to check the "Enable Single Sign-on" field.

That's all! Now you and your users can access Opsgenie from PingOne directly.