Ping Identity Integration

Ping Identity Integration

TigerTrust integrates with Ping Identity for enterprise identity federation and access management.

PingFederate Configuration

Add TigerTrust as a Service Provider:

xml
1<SPConnection>
2  <EntityId>https://tigertrust.io/saml/metadata</EntityId>
3  <BaseURL>https://api.tigertrust.io</BaseURL>
4  <AssertionConsumerService>
5    <Binding>POST</Binding>
6    <Location>/auth/saml/callback</Location>
7  </AssertionConsumerService>
8</SPConnection>

PingOne Integration

Configure PingOne cloud identity:

yaml
1pingone:
2  environment_id: your-environment-id
3  client_id: your-client-id
4  client_secret: $PINGONE_SECRET
5
6  population: TigerTrust Users
7
8  attribute_mapping:
9    email: email
10    name: name.formatted
11    groups: memberOf

Attribute Contract

Define attribute mappings:

Access Policies

Configure access control policies:

text
1Policy: Certificate Management Access
2---
3Authentication:
4  - Method: MFA
5  - Factors: Any 2 of [Password, SMS, Authenticator]
6
7Authorization:
8  - Groups: Certificate-Admins, Security-Team
9  - Attributes: department = "IT"

API Security

Secure API access with PingAccess:

yaml
1api_security:
2  authentication: OAuth 2.0
3  token_endpoint: https://auth.pingone.com/token
4
5  scopes:
6    - certificates:read
7    - certificates:write
8    - policies:manage
9
10  rate_limiting:
11    requests_per_minute: 100

Directory Federation

Federate identities across directories:

• Active Directory
• LDAP
• Cloud directories
• Partner organizations

Enable enterprise identity federation with Ping Identity and TigerTrust.