PingFederate SAML SSO WordPress: Complete Setup Guide for PingFederate WordPress Single Sign-On

Instructions:

1. Log into your WordPress admin dashboard
2. Navigate to Plugins → Add New
3. Search for “Keywoot SAML SSO“
4. Click Install Now and then Activate

Access PingFederate Admin Console:

1. Open your web browser and navigate to the PingFederate Administration Console
2. Log in with your administrator credentials

Create New SP Connection:

1. Navigate to Identity Provider → SP Connections
2. Click Create New to create a new SP connection
3. Choose Browser SSO Profile and click Next
4. On the Connection Options tab, select Browser SSO
5. Click Next to continue

Import WordPress Metadata:

1. Select Import SP metadata from file
2. Browse and select the WordPress SP metadata file (downloaded it SP Metadata tab WordPress SAML SSO plugin by keywoot)
3. Click Import to process the metadata
4. Review the metadata summary and click Next
5. On the General Info page, confirm the auto-filled Entity ID and Base URL
6. Click Next to proceed

Browser SSO Configuration:

1. Click Browser SSO → Configure Browser SSO (opens new wizard)
2. Select the following SSO profiles:
3. IDP-Initiated SSO (allows users to start from PingFederate)
4. SP-Initiated SSO (allows users to start from WordPress)
5. Set Assertion Lifetime to default 5 minutes (can be customized as needed)
6. Click Next to continue

Assertion Creation:

1. Click Assertion Creation → Configure
2. Set Identity Mapping to STANDARD
3. In Attribute Contract, define the NameID format
4. Click Map Adapter Instance and select one that includes user email
5. Set Mapping Method to Use only adapter contract values
6. In Attribute Contract Fulfilment, map email to SAML_SUBJECT
7. (Optional) Add Issuance Criteria if needed (e.g., role-based filters)
8. Review Assertion Creation Summary and click Done

Protocol Settings:

1. Click Protocol Settings → Configure
2. Enable POST binding
3. Confirm ACS URL matches the one provided in WordPress plugin metadata
4. Set Allowable SAML Bindings to POST
5. Configure Signature Policy according to your security needs (default is fine)
6. Enable Encryption Policy if you are premium plan of Keywoot SAML SSO plugin
7. Review Protocol Settings Summary and click Done

Credentials and Activation:

1. Click Credentials → Configure
2. Select your Signing Certificate
3. Check Include cert in the signature element
4. Set Connection Status to Active
5. Click Save Connection

Export IdP Metadata from PingFederate:

1. In PingFederate Admin Console, go to Identity Provider → SP Connections → Manage All
2. Select your WordPress connection from the list
3. Click Export Metadata to download the PingFederate IdP metadata file
4. Save the metadata file to your computer (you’ll need it for WordPress configuration)

Configure WordPress Plugin:

1. Go to WP SAML SSO Plugin Settings in your WordPress admin dashboard
2. Navigate to the Identity Provider tab
3. Upload the PingFederate IdP metadata file you just downloaded
4. Click Save Settings to apply the configuration

Test Configuration:

1. In WordPress, navigate to WP SAML SSO Plugin Settings
2. Click on Test Configuration in the plugin to verify the setup

WordPress SAML Plugin Test Configuration – Click Save and then Test Configuration to verify the SAML setup with PingFederate
3. This will open up a popup window and redirect you to the PingFederate login page
4. Authenticate with your assigned PingFederate user credentials
5. After successful authentication, you should be redirected back to WordPress and you should see a success message screen along with the attributes received from PingFederate