Introduction
This document provides instructions to configure PingOne Single Sign-On (SSO) for the DeviceLock App in the PingOne Admin Console.Prerequisite
You must have administrator access to the PingOne Admin Console.Steps to Configure PingOne SSO
Create Environment Create and Configure ApplicationsSteps to Create an Environment
Note: If an environment already exists, skip this section.
- Sign in to the Ping Identity Administrator Console with your PingOne account credentials.
- Click Create Environment
The Create Environment screen is displayed.
- Select Customer Solution and then click Next.

- Click Next.

- Do the following:
- Enter Trial Environment Name.
- Enter Description (Optional)
- Select Environment ID.
- Select a Region.
- Select a Licence.
- Click Finish.
The environment is created successfully.
Steps to Create and Configure Application
- Go to the newly created environment, select Applications > Applications.
The application page is displayed.
- Click Add icon (
).
The Add Application page is displayed.
- Do the following:
- Enter Application Name.
- Enter Description (Optional).
- Select OIDC Web App as the Application Type.
- Click Save.
The application is created successfully.
- Select the newly created application.
The Application detail page is displayed.
- On the application profile page, enable the app using the toggle button next to the application name.
The app is enabled successfully.
- Select Overview > OpenID Connect.
The Edit Configuration screen is displayed.
- Do the following:
-
Enter the Redirect URIs.
Note: Click + Add to add additional redirect URIs, if required (Optional).
- Ensure that Client Secret Basic is selected as the Token Endpoint Authentication Method.
-
Enter the Signoff URL.
Note: To get the Redirect URI and Signoff URL, go to your Oloid Portal, select Tenant Settings > Security > SSO > PingOne, and copy the DeviceLock URLs and enter the URLs in the respective field.

-
Click Save.

-
Enter the Redirect URIs.
- In the application overview, click Resources > Allowed Scopes Edit icon.
The Edit Resources page is displayed.
- Select email > click Save.
The email is added in the allowed scopes list.
The PingOne SSO for DeviceLock is configured successfully.