PingFederate Advanced Administration

This course steps the learner through various advanced PingFederate administration topics, such as configuring memory options for PingFederate, logging to a database server, configuring certificate revocation checking and certificate rotation, configuring self-service features of the HTML Form Adapter, identity provider (IdP) to service provider (SP) bridging, clustering with dynamic discovery, and more.

The following are the prerequisites for successfully completing this course:

• Completion of the PingFederate Administration course, or
• Equivalent experience with PingFederate
  
  

Day 1: Course Introduction

• Server Administration
• Configuring JVM memory options
• Configuring virtual host names
• Certificate based console administration
• Lab 1: Configuring OIDC-based console single sign-on (SSO)

• Customizing audit logs
• The log4j2.xml file
• Logging to an external database
• Lab 2: Logging with PingFederate
• Certificates
• Certificate revocation checking
• Certificate rotation

• HTML Form Adapter Self-Service Features
  • Password spray and account lockout prevention
  • Self-service password change
  • Self-service password reset
  • Self-service username recovery
  • Lab 3: HTML Form Adapter self-service options
• HTML Form Adapter Self-Registration
  • Customer IAM with local identity profiles
  • Self-registration with local identity profiles
  • Self-registration using third-party IdPs
  • Lab 4: HTML Form Adapter customer registration
• Advanced Attribute Mapping
  • Using multiple datastores
  • Using REST API as a datastore
  • Extended properties
  • PingDirectory virtual attributes
• SSO Connections
  • Customizing SSO URLs
  • SP target URL mapping
  • IdP-to-SP bridging
  • Session management
  • Lab 5: SSO connections

• Federation Hub
  • Bridging an IdP to an SP
  • Bridging an IdP to multiple SPs
  • Bridging multiple IdPs to an SP
  • Bridging multiple IdPs to multiple SPs
• OAuth2 and OIDC
  • Dynamic client registration
  • Using directories for persistent grant storage
  • Creating and managing OIDC profiles
  • Lab 6: Configuring OIDC profiles
• Clustering
  • Cluster protocol architecture
  • Runtime state management architecture
  • Adaptive clustering
  • Directed clustering
  • Dynamic discovery
  • Cluster replication
  • Lab 7: Clustering
• Troubleshooting
  • SSO issues
  • OAuth2 issues
  • Certificate issues