Step by step guide to configure Ping Identity as a SAML Identity Provider within Visma

Follow the steps below to configure  Ping Identity as a SAML Identity Provider within Visma. Keep Authentication Settings open in your browser while you access Ping Identity in a new window or tab. You will need to return to the Single Sign-On page to complete the configuration steps.

Prerequisites

• Ping Identity account with Admin rights

• All of your users under your account in Visma will need a pre-existing account in Ping Identity with exactly the same domain email address.

Configure Visma Single Sign-On app in Ping Identity

1. On the "Single Sign-On" page go to section  1. Copy the Visma metadata details into Ping Identity.

   

2. Log into your Admin panel.

3. Click  Connections from the left side menu.

4. Add a new application by  clicking the plus sign from the left upper corner.

   

5. Click  Advanced configuration and then click  Configure for SAML connection type.

   

6. Name your application and click  Next.

   

7. Select  Import From URL option.

8. While on Configure SAML Connection copy from Authentication Settings section  1.Copy the Visma metadata details into Ping Identity the metadata link.

9. Paste the link into the  IMPORT URL box and click  Import.

10. From the section  SIGNING KEY select the option  SIGNED RESPONSE.

11. From section  SLO BINDING select for  SUBJECT NAMEID FORMAT the option: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress.

12. For  ASSERTION VALIDITY DURATION insert  60(seconds).

    

13. Click  Save and Continue.

14. Use the table from Authentication Settings section 2. Configure claims in Ping Identity to add mappings into the Ping Identity page from left to right for each row.

    

15. On the added attributes select the checkbox for  Required.

    

16. Click  Save and Close.

17. To enable your new application activate the toggle button from the right upper corner.

    

Configure Visma Single Sign-On to use Ping Identity.

1. While on your newly created application go to the  Configuration tab.

2. Click  Download Metadata.

   

3. Upload this Metadata XML file into the section  3.Upload Ping Identity metadata into Visma from Authentication Settings. It contains all your Ping Identity information that Visma needs in order to complete the setup.

   

4. Continue with your Advanced configuration and click  Save.

Testing Single Sign-On after Visma has made its configuration

To make sure SSO is working, perform this step:

1. To test SSO access go to your Visma MyDomain e.g. https://example.my.connect.visma.com directly, and then click the  Sign in with Ping Identity button.