Skip to main content

Sign in with PingIdendity

To enable Sign in with PingIdendity, you need to create an Application in your PingIdendity account. The following steps guide you through the process:

  1. Go to the PingIdendity Admin Console and select the appropriate environment.

  2. Navigate to Applications > Add Application. Fill CubeAPM in Application Name, select OIDC Web App in Application Type, and click Save.

    Create Application

  3. On the Application Overview page that appears next, click the switch next to the application name to enable the application.

    Then, on the same page, copy Client ID, Client Secret, and Issuer ID and provide them to CubeAPM to enable Sign in with PingIdentity (set auth.oidc.pingidentity.client-id, auth.oidc.pingidentity.client-secret and auth.oidc.pingidentity.issuer-url properties in /etc/cubeapm/config.properties, or configVars.auth.oidc.pingidentity.clientId, configVars.auth.oidc.pingidentity.clientSecret and configVars.auth.oidc.pingidentity.issuerUrl in helm chart values file).

    Application Credentials

  4. Go to Configuration tab and click on Edit button.

    Application Configuration

    On the Edit screen, fill <cubeapm_address>/api/auth/self-service/methods/oidc/callback/pingidentity in Redirect URIs and click Save.

    Redirect URI

  5. Go to Resources tab, click Edit, and add email, openid and profile scopes. You may need to scroll down the list to find the scopes.

    Redirect URI

  6. Go to Policies tab, click Edit, and select the desired policies.

The PingIdentity application is now ready for use with CubeAPM.