Skip to main content

Configure Tenfold to use Ping Identity as an identity provider

Configuration instructions

  1. If not already completed, configure your Identity Repository in Setup.

    NOTE: If you are creating a PingOne Directory you may have to add users to the directory and set the default password.

  2. Log in to PingOne as a user with administrator privileges and navigate to Applications > My Applications.

  3. Click Add Application and select “New SAML Application.”

  4. Fill in the Application Details section and click Continue to Next Step.

    On the Application Details page, enter the application details. Application Name, Application Description and Category are required fields. You can optionally assign an application icon. The icon file can be up to 5 Mb in size. The supported graphics formats are JPEG/JPG and PNG.

  5. Click Continue to Next Step.

  6. On the Application Configuration page, provide the SAML configuration details for the application.

    • Enter the ACS URL and Entity ID

      ACS URL: https://dashboard.tenfold.com/corporate-login/callback

      Entity ID: sso.tenfold.com

    • SAML Metadata.

      Click Download to retrieve the SAML metadata for PingOne.

    • Upload Metadata.

      Click Choose File to upload the application’s metadata file.

  7. Select I have the SAML configuration.

    SSO Attribute mapping:-

    Modify or add any attribute mappings as necessary for the application, then continue to the next step. When you’ve finished modifying or adding any additional attributes, click Continue to Next Step. The Add Groups page is displayed & you can configure the ways 2 ways in which you can login.

    NOTE: Add additional Attribute Statements and set the two to have the following name/value pairings {(firstName, user.firstName), (lastName, user.lastName)}. Although adding in these additional Attributes are optional, Tenfold WILL need these set to create new users within Tenfold via PingIdentity. Failure to provision email, firstName, and lastName may result in users being created inconsistent with the connected CRM.

  8. Click Save & Publish. The Review Setup window is displayed.

  9. Configure SSO in Tenfold Dashboard.

    In Tenfold dashboard, navigate to Feature > Single Sign ON. Set the domain to the value which you want your users to enter when logging in to Tenfold and upload the metadata XML file which was generated in step #6. Click save at the bottom of the page.

    You are ready to use Ping ID to authenticate to Tenfold. The below gif demonstrates the login flow using Ping ID using multi-factor authentication.

Troubleshooting

Issue: When performing a Service Provider Initiated (SP-Init) Single Sign-On (SSO) the following error displays and SSO fails.

Error:- SAML_215: Sorry, we’re unable to fulfill the requested NameID format.

error.png

Possible solution

  1. Log in to PingOne for Enterprise account.

  2. Navigate to Applications > My Applications.

  3. Click the application in the table where you are configuring SSO.

  4. Click Edit and Continue to Next Step twice.

  5. (Skip this step if SAML_SUBJECT attribute exists) Click Add new attribute at “3. Attribute Mapping” page and enter SAML_SUBJECT for Application Attribute column and map an appropriate attribute to it.

  6. Click Advanced for SAML_SUBJECT attribute and enter the values seen in the screenshot below.

  7. Click Save & Publish.

  8. Click Finish.

NOTE: For Enterprise Organization (having different sites at a different location), we should need to have different Entity ID for each tenant. So for that, we simply need to enable – “Use new Service Provider Entity ID format” in Tenfold Dashboard under SSO feature and then click Save.

Then only we will be able to concatenate the Tenant Org ID with the Entity ID (ie sso.tenfold.com/org id).

In this section: