> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oloid-demo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Tenant Admin Portal - How to Configure OIDC - PingOne IDP Profile

> This document provides step-by-step instructions to configure OIDC - PingOne IDP Profile in the Tenant Admin Portal.

## Introduction

This document explains how to configure an **OIDC PingOne Identity Provider (IDP) profile** in the Tenant Admin Portal.

## Prerequisites

* You must have access to the Tenant Admin Portal.
* PingOne IDP profile must be created in Tenant Admin Portal. To create refer, [How to create IDP Profile for PingOne](https://oloid.help/en/articles/10822772-how-to-create-idp-profile-for-pingone).
* Ensure that the Webkey application is created. To create Webkey application, refer [How to create and configure WebKey Application in Tenant Admin Portal](https://oloid.help/en/articles/8693859-how-to-create-and-configure-webkey-application-in-tenant-admin-portal).

## Steps to Configure OIDC-PingOne IDP Profile

1. Log in to the **Tenant Admin Portal**.
2. On the **Applications** page, click **Security** > **Identity Provider**.

   ![How to Configure OIDC - PingOne IDP... - screenshot 1](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-78ab3b26.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=cadfd29b5da3bc75ff00d4e9643551d5)

   The **Identity Provider Profiles** page is displayed.
3. Click PingOne-IDP application.

   ![How to Configure OIDC - PingOne IDP... - screenshot 2](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-e950f2cd.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=9e0f618e8aa63cfb92f9ce2b23c46c0e)

   The application details page is displayed.
4. Do the following:
   1. [Configure Details tab](#configure-details-tab)
   2. Integrate Metadata tab
   3. [Configure IDP Settings tab](#configure-idp-settings-tab)
   4. [Configure Claims tab](#configure-claims-tab-optional)
      The IDP Profile is configured.

### Configure Details Tab

The Details tab is used to view and manage the basic information such as IDP Name, IDP Description, etc. for the identity provider configured in the Tenant Admin Portal.

To configure the Details tab, do the following:

1. Edit the **IDP Name**. (Optional)

   ![How to Configure OIDC - PingOne IDP... - screenshot 3](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-82d75074.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=88b1e82faf84d9b1b9ddae62b767b688)
2. Enter **Description**. (Optional)

   ![How to Configure OIDC - PingOne IDP... - screenshot 4](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-c254f086.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=c242f863d2c0172ea90e5c3995761a37)
3. Do one of the following:
   1. Select the required WebKey application from the **Select WebKey Application** dropdown list.

      ![How to Configure OIDC - PingOne IDP... - screenshot 5](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/237af1cd-9508-460c-8c25-623bf278eec6-d4c85528.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=725b569949a53fa0d2c456065719d19b)

      (OR)
   2. Click **Make Default**.

      > [!NOTE]
      >
      > **Note:** The **Make Default** button is enabled only when more than one IDP is added in the Tenant Admin Portal.

      ![How to Configure OIDC - PingOne IDP... - screenshot 6](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/569f5c44-81e6-4f88-81b7-7c265bf303a1-61dda655.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=74e470e64ab6bdad347afb3c26a6cb81)

      The **Set this as Default IDP** pop-up box is displayed.

      * Select the **Webkey Application**.
      * Select **Set as Default**.

        ![How to Configure OIDC - PingOne IDP... - screenshot 7](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-86896458.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=125c4bb85eff107d35418854dcc4dc2d)

        The WebKey application is set as the default, and the application is linked to this IDP.

        ![How to Configure OIDC - PingOne IDP... - screenshot 8](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-46e37bd6.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=185e189236d81e9fb3476a3228adcd9f)
4. Click **Save**.

   ![How to Configure OIDC - PingOne IDP... - screenshot 9](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-7eb6942e.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=114aee76a68f28f2512f1f00f15cffc8)

> [!NOTE]
>
> **Note:** If another IDP is currently set as default, it will be replaced upon confirmation.

* To make IDP as default, click **Make Default**. The confirmation pop-up box is displayed.
* Click **Set as Default** to designate the preferred IDP as default.

![How to Configure OIDC - PingOne IDP... - screenshot 10](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/fd786cd3-9105-4326-b0c0-d84a80db1990-2324a93b.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=3b702fdb37c992668142d5014c1a3364)

Details tab is configured successfully.

### Configure Oloid Metadata Tab

The Metadata tab is used to provide the required information to configure PingOne settings and enable PingOne based authentication between the identity provider and the Tenant Admin Portal.

1. Click **Oloid Metadata**.
   The Oloid Metadata tab is displayed.

   ![How to Configure OIDC - PingOne IDP... - screenshot 11](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-948ac544.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=8fc310ed89fc8e56411220653511283a)
2. Click [Visit help page](https://oloid.help/en/articles/10796370-integrating-oloid-tenant-to-your-pingone-oidc-instance) for the document to configure PingOne settings for SSO login.
3. Do the following:
   1. **Download Oloid Metadata:** Download the certificate and upload it to the **IDP Signature Certificate** field.
   2. **OpenID Configuration Endpoint:** Copy the OpenID Configuration Endpoint URL and enter it in the **Discovery Endpoint URL** field in the PingOne Admin Console.

      ![How to Configure OIDC - PingOne IDP... - screenshot 12](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-0257f77b.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=6669b097a48eb2945a54dd6bf1ecb043)

      > [!NOTE]
      >
      > **Note:** You can find the **Discovery Endpoint URL** field in the PingOne Admin Console. For details, click **[here](https://oloid.help/en/articles/10796370-integrating-oloid-tenant-to-your-pingone-oidc-instance#:~:text=Next%2C%20select%20Use%20Discovery%20Document.)**.

      ![How to Configure OIDC - PingOne IDP... - screenshot 13](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-8edeb50f.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=95afffeabbfdd7967fe49e74673e44aa)

### Configure IDP Settings Tab

The **IDP Settings** tab is used to configure and upload the required PingOne details to enable authentication between the identity provider and Tenant Admin Portal.

To configure the IDP settings tab, do the following:

1. Click the **IDP Settings** tab.
   The IDP Settings page is displayed.
2. Do the following to configure the IDP Settings tab.
   1. Enter **IDP ID**.

      ![How to Configure OIDC - PingOne IDP... - screenshot 14](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-6099b735.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=23a4291a9574d8ef2f2cb2fdf1a94b8c)

      > [!NOTE]
      >
      > **Note:** You can find the IDP ID from PingOne Admin Console under **Integrations** > **External IdPs** > select your configured IDP.

      ![How to Configure OIDC - PingOne IDP... - screenshot 15](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-8cf64c7e.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=eaba55a1ebea6bf0e82670b13ec80e80)
   2. Enter **Callback URL**.

      ![How to Configure OIDC - PingOne IDP... - screenshot 16](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-f06b1ba8.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=b711ac303a816fba9b11ff9831fa4ed3)

      > [!NOTE]
      >
      > **Note:** You can find the Callback URL from PingOne Admin Console under **Integrations** > **External IdPs** > select your configured IDP >click **Connection** tab > **CALLBACK URL**.

      ![How to Configure OIDC - PingOne IDP... - screenshot 17](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-70fae354.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=0e505f3c8d82ce41f547f3b57eebb315)
   3. Enter **Redirect URL**.

      ![How to Configure OIDC - PingOne IDP... - screenshot 18](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-e9658467.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=e3fb0fbc29508c59d02560a5f77d2e4b)

      > [!NOTE]
      >
      > **Note:**
      >
      > * You can find the Redirect URL from PingOne Admin Console under **Applications** > **Applications** > **PingOne Application Portal** > **Configuration** tab > **General** section. To get the Redirect URLs, click [here](https://oloid.help/en/articles/10796370-integrating-oloid-tenant-to-your-pingone-oidc-instance#:~:text=Paste%20the%20copied%20URL%20in%20the%20Configuration%20tab%20%3E%20Redirect%20URL%20field%20of%20the%20created%20application.).
      >
      > * If you're using a custom domain, contact **Professional Services** for assistance.
      >
      > 4. Enter **Application Client ID.**
      >
      >    ![How to Configure OIDC - PingOne IDP... - screenshot 19](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-171a05a6.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=9f0dcf323bacf54f9734443d97c0352e)
      > 5. Enter **Authorize URL.**
      >
      >    ![How to Configure OIDC - PingOne IDP... - screenshot 20](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-6a243573.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=a95786a96e72b20a4af73b230ddd1224)
      > 6. Enter **Secret.**
      >
      >    ![How to Configure OIDC - PingOne IDP... - screenshot 21](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-15a7ddbc.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=5cbb74adebeac2bb2c9478372ef575f1)

      > [!NOTE]
      >
      > **Note:** You can find the **Application Client ID, Authorize URL** and **Secret** from PingOne Admin Console. Navigate to **Applications** > **Applications** > **PingOne Application Portal** > **Overview** tab.

      ![How to Configure OIDC - PingOne IDP... - screenshot 22](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-7946350b.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=cdcdd237084fa899b3371e553b27aae7)
   4. **Enter Home URL:** Enter the URL of the home page.
   5. **Home Label Button:** Enter the text displayed on the **Home** button.

      ![How to Configure OIDC - PingOne IDP... - screenshot 23](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-b1f4542f.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=900118aa93da29003f8665e989a4f974)
   6. Click **Save**.

      ![How to Configure OIDC - PingOne IDP... - screenshot 24](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-a94d79dd.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=99049225d0fddb482aaad11aee351e73)

      The IDP Profile is configured successfully.

### Configure Claims Tab (Optional)

The **Claims** tab is used to configure custom claims that pass user attributes from Oloid to the OIDC provider.

Do the following:

* [Custom Claims](#custom-claims)
* [Authentication Methods References (AMR) Claims](#authentication-methods-references-amr-claims)

  ![How to Configure OIDC - PingOne IDP... - screenshot 25](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-981833ee.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=218571a1b313ac233737a5941d70412e)

#### Custom Claims

Custom Claims allow the admin to map Oloid user attributes to OIDC attributes.

Do the following:

1. In the **Custom Claims** tab, expand the **Custom Claims** section.
   The Custom Claims section is displayed.

   ![How to Configure OIDC - PingOne IDP... - screenshot 26](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-f36b366d.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=45ca91368372d59716104eed6df3b831)

2. In the **Custom Claims** section, click **Add Field**.

3. In the **OIDC Attribute** field, enter the OIDC Attribute.

4. Select the Oloid Value from the **Oloid Value** dropdown.

   > [!NOTE]
   >
   > **Note:** Click **Add Field** to add additional claim.

5. Click **Save.**

   ![How to Configure OIDC - PingOne IDP... - screenshot 27](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-aac44ac4.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=f8be7f1d4568652f2344e17d4e884924)

   The Custom claims are configured successfully.

   ![How to Configure OIDC - PingOne IDP... - screenshot 28](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-9209b6c1.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=a1633be5c4f177c53b1518516f07f07c)

#### Authentication Methods References (AMR) Claims

**AMR Claims** indicate **how a user was authenticated** during the login process.

1. In the **AMR Claims** tab, expand the **AMR Claims** section.
   The AMR Claims section is displayed.

   ![How to Configure OIDC - PingOne IDP... - screenshot 29](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-3eb5e68e.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=900dac519ab5cd428aacf4d173d6bf41)

2. In the **AMR Claims** section enter the authentication method value.

   ![How to Configure OIDC - PingOne IDP... - screenshot 30](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/a6f55bf4-1c50-4ae8-bcf3-a7845ec37ddc-adbb90e3.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=113b7f828c6670fd210a157a8341e731)

   > [!NOTE]
   >
   > **Note:** Click **Add** to add additional AMR claim items.

3. Click **Save.**

   ![How to Configure OIDC - PingOne IDP... - screenshot 31](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-3fa2c755.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=074e66f21a06763e6d0b8394fc5e7909)

   The AMR section is configured successfully.

   ![How to Configure OIDC - PingOne IDP... - screenshot 32](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-a3bfccb8.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=b0106db466beef57fd37f6517416f049)

   The PingOne IDP is configured successfully.

   ![How to Configure OIDC - PingOne IDP... - screenshot 33](https://mintcdn.com/oloid-999c42b2/VDgHbjX8NcXdvY3w/images/intercom/10826464/image-96234645.png?fit=max\&auto=format\&n=VDgHbjX8NcXdvY3w\&q=85\&s=ce141032badf1845fbef1a537a3ed89f)

##### Related Article

[Integrating Oloid tenant to your PingOne (OIDC) instance](https://oloid.help/en/articles/10796370-integrating-oloid-tenant-to-your-pingone-oidc-instance)