PingFederate Administration

This course implements various use cases with PingFederate and introduces industry concepts such as federation, SAML, and OAuth. The course also includes PingFederate-specific topics such as integration kits, adapters, SSO connections, and OAuth configuration. Hands-on exercises allow the participants to have first-hand experience in configuring PingFederate, establishing a web SSO connection and OAuth clients, and doing some basic troubleshooting.

The following are the prerequisites for successfully completing this course:

• Completion of the Getting Started With PingFederate course available at:
  • https://backstage.forgerock.com/university/ping/on-demand/category/PING

Day 1: Background of Federation Web SSO and Core Product

• Introduction to identity federation
• Introduction to integration kits
• Configuring SP and IdP adapters and password credential validators
  • Lab 1: HTML Form Adapter and Reference ID adapter configuration
• Introduction to SAML
• Configuring IdP and SP SSO connection
  • Lab 2: Creating connections for IdP and SP web SSO
    
• Server logs

• Lab 3: Review the server logs to follow and SSO transaction

Day 2: Further Integration and PingFederate Functionality

• Attribute mapping and data source
  • Lab 4: Mapping attributes from external sources
  • Lab 5: Using an external source for authentication
• Introduction to authentication policies
  • Lab 6: Creating authentication selectors, policy contracts, and authentication policies
  • Lab 7: Tracing SSO transactions in the PingFederate logs

Day 3: OAuth2 and Advanced Administration

• Introduction to OAuth2
• OAuth2 scopes and access tokens
  • Lab 8: Configuring OAuth2 grants (including token validation, authorization code)
  • Lab 9: Create an OAuth client for client Credentials grant type
  • Lab 10: Create an OAuth client for a resource server
  • Lab 11: Create an OAuth client for authorization grant type
  Introduction to OIDC
• PingFederate administrative API
  • Lab 12: Using the admin API
• Server Administration 
• Deployment scenarios and clustering
  • Lab 13 (optional): Configuring a cluster