PingFederate Advanced Administration

This course steps the learner through various advanced PingFederate administration topics, such as configuring memory options for PingFederate, logging to a database server, configuring certificate revocation checking and certificate rotation, configuring self-service features of the HTML Form Adapter, identity provider (IdP) to service provider (SP) bridging, clustering with dynamic discovery, and more.

Day 1: Course Introduction

• Server Administration
• Configuring JVM memory options
• Configuring virtual host names
• Certificate based console administration
• Lab 1: Configuring OIDC-based console single sign-on (SSO)

• Customizing audit logs
• The log4j2.xml file
• Logging to an external database
• Lab 2: Logging with PingFederate
• Certificates
• Certificate revocation checking
• Certificate rotation

• HTML Form Adapter Self-Service Features
  • Password spray and account lockout prevention
  • Self-service password change
  • Self-service password reset
  • Self-service username recovery
  • Lab 3: HTML Form Adapter self-service options
• HTML Form Adapter Self-Registration
  • Customer IAM with local identity profiles
  • Self-registration with local identity profiles
  • Self-registration using third-party IdPs
  • Lab 4: HTML Form Adapter customer registration
• Advanced Attribute Mapping
  • Using multiple datastores
  • Using REST API as a datastore
  • Extended properties
  • PingDirectory virtual attributes
• SSO Connections
  • Customizing SSO URLs
  • SP target URL mapping
  • IdP-to-SP bridging
  • Session management
  • Lab 5: SSO connections

• Federation Hub
  • Bridging an IdP to an SP
  • Bridging an IdP to multiple SPs
  • Bridging multiple IdPs to an SP
  • Bridging multiple IdPs to multiple SPs
• OAuth2 and OIDC
  • Dynamic client registration
  • Using directories for persistent grant storage
  • Creating and managing OIDC profiles
  • Lab 6: Configuring OIDC profiles
• Clustering
  • Cluster protocol architecture
  • Runtime state management architecture
  • Adaptive clustering
  • Directed clustering
  • Dynamic discovery
  • Cluster replication
  • Lab 7: Clustering
• Troubleshooting
  • SSO issues
  • OAuth2 issues
  • Certificate issues