{
  "schema_version": 2,
  "id": "operate/rc/security/access-control/saml-sso/saml-integration-ping-identity",
  "title": "PingIdentity SAML integration guide",
  "url": "https://redis.io/docs/latest/operate/rc/security/access-control/saml-sso/saml-integration-ping-identity/",
  "summary": "This integration guide shows how to set up PingIndentity as a SAML single sign-on provider for your Redis Cloud account.",
  "tags": [
    "docs",
    "operate",
    "rc"
  ],
  "last_updated": "2026-10-01T14:41:30+01:00",
  "page_type": "content",
  "content_hash": "f54dcf3c82cbead33b1e2e5a855c2d2cd66d91f220cfe6a8fd85d0ca78895b93",
  "sections": [
    {
      "id": "overview",
      "title": "Overview",
      "role": "overview",
      "text": "This guide shows how to configure [PingIdentity](https://docs.pingidentity.com/) as a SAML single sign-on identity provider (IdP) for your Redis Cloud account.\n\nTo learn more about Redis Cloud support for SAML, see [SAML single sign-on](https://redis.io/docs/latest/operate/rc/security/access-control/saml-sso).\n\nBefore completing this guide, you must [verify ownership of any domains](https://redis.io/docs/latest/operate/rc/security/access-control/saml-sso#verify-domain) you want to associate with your SAML setup."
    },
    {
      "id": "step-1-set-up-your-identity-provider-idp",
      "title": "Step 1: Set up your identity provider (IdP)",
      "role": "content",
      "text": ""
    },
    {
      "id": "add-the-redisaccountmapping-attribute",
      "title": "Add the `redisAccountMapping` attribute",
      "role": "content",
      "text": "1. Log in into your Ping Identity account. Open **Administrators > Identities > User Attributes** and select **Add Attribute**.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_1.png)\n\n2. Select the **DECLARED** attribute type.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_2.png)\n\n3. Fill in the fields with the following values:\n\n    * **Name**: `redisAccountMapping`\n    * **Display name**: `redisAccountMapping`\n    * **Description**: `redisAccountMapping`\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_3.png)\n\n    Select **Save and Close**. Then, verify that the attribute was created successfully.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_4.png)"
    },
    {
      "id": "add-the-user-who-will-activate-saml-in-service-manager-redis-cloud",
      "title": "Add the user who will activate SAML in Service Manager (Redis Cloud)",
      "role": "content",
      "text": "1. Go to **Administrators > Identities > Users** and select **Add User**.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_5.png)\n\n1. Fill in the following information:\n\n    * **redisAccountMapping**: `{accountID}={role}`\n     \n    **accountID** is the account ID from [account settings](https://redis.io/docs/latest/operate/rc/accounts/account-settings) and **role** represents the role that the user will be assigned in Redis Cloud console (owner, member, manager, billing_admin, or viewer):\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_6.png)\n\n    Save and check that the user was added successfully."
    },
    {
      "id": "create-the-ping-identity-saml-application",
      "title": "Create the Ping Identity SAML application",
      "role": "content",
      "text": "1. Go to **Administrators > Connections > Applications** and select **+** to add a new application.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_7.png)\n\n1. Choose a name for the application, select **SAML Application Type** and select **Configure**.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_8.png)\n\n1. In the ACS URLs and Entity ID field add for now some dummy data, like https://example.com\n   \n    * This data will be updated with the correct data in a subsequent step.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_9.png)\n\n    Select **Save**.\n\n1. Go to the **Configuration** tab and save the following information:\n   \n    * Issuer ID\n    * Single Logout Service\n    * Single Signon Service\n\n    This information will be needed once we configure SAML in the Redis Cloud console.\n\n    * Select **Download Metadata**. An XML file will be downloaded. Open it and copy the certificate, which is required for the configuration in Redis Cloud console.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_10.png)\n\n5. Go to the **Attribute Mappings** tab. Add the following attributes:\n\n    * saml_subject\n    * Email\n    * FirstName\n    * LastName\n    * redisAccountMapping\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_11.png)"
    },
    {
      "id": "step-2-configure-saml-support-in-redis-cloud",
      "title": "Step 2: Configure SAML support in Redis Cloud",
      "role": "content",
      "text": "Now that we have our Ping Identity IdP server ready, we need to configure support for SAML in Redis Cloud."
    },
    {
      "id": "sign-in-to-redis-cloud",
      "title": "Sign in to Redis Cloud",
      "role": "content",
      "text": "Sign in to your account on the [Redis Cloud console](https://cloud.redis.io/#/login)."
    },
    {
      "id": "activate-saml-in-access-management",
      "title": "Activate SAML in access management",
      "role": "content",
      "text": "To activate SAML, you must have a local user (or social sign-on user) with the **owner** role. If you have the correct permissions, you will see the **Single Sign-On** tab.\n\n1. Fill in the information you copied previously, including:\n\n    * **Issuer (IdP Entity ID)**: `Issuer ID`\n    * **IdP server URL**: `Single Signon Service`\n    * **Single logout URL**: `Single Logout Service`\n    * **Assertion signing certificate**: Certificate info you copied from the Ping Identity XML file\n\n    Also add:\n\n    * **Email domain binding**: The domain used in your company's email addresses\n\n    ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_1.png)\n\n    Select **Enable** and wait a few seconds for the status to change.\n\n1. You will then be able to **Download** the service provider (SP) metadata. Save the file to your local hard disk.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_3.png)\n\n1. Open the file in any text editor. Save the following text from the metadata:\n\n    * **EntityID**: The unique name of the service provider (SP)\n\n    ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_4.png)\n\n    * **Location**: The location of the assertion consumer service\n\n    ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_5.png)"
    },
    {
      "id": "step-3-finish-saml-configuration-in-ping-identity",
      "title": "Step 3: Finish SAML configuration in Ping Identity",
      "role": "content",
      "text": "1. In Ping Identity, go to **Administrators > Connections > Applications** and select your application name. Select the **Configuration** tab and select **Edit**.\n\n    This is where we had entered mock data. We will now enter the correct data for this step:\n\n    * Paste **EntityID** information in the **Entity ID** field.\n\n    * Paste **Location** link in the ACS URLS field.\n\n    * For the **Sign on URL** field, add URL `https://cloud.redis.io/#/login/?idpId=`, where you need to add the ID from the Reply URL ID, for example, `https://cloud.redis.io/#/login/?idpId=0oa5pwatz2JfpfCb91d7`.\n\n    Select **Save**.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_13.png)\n\n1. Select the slider to enable the app.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_14.png)"
    },
    {
      "id": "step-4-return-to-redis-cloud-console",
      "title": "Step 4: Return to Redis Cloud console",
      "role": "content",
      "text": "1. Return to the Redis Cloud console and select **Activate**.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_8.png)\n\n1. A popup appears, explaining that to test the SAML connection, you need to log in with credentials of a user defined in Ping Federate. Select **Continue** to go to the Ping Federate login screen.\n\n1. The Ping Federate login screen will appear. Enter the credentials and select **Sign In**.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_20.png)\n\nIf everything is configured correctly, you will see the the Redis Cloud console screen. Your local account is now considered a SAML account. \n\nTo log in to the Redis Cloud console from now on, click on **Sign in with SSO**.\n\n![Sign in with SSO button](https://redis.io/docs/latest/images/rc/button-sign-in-sso.png)"
    },
    {
      "id": "idp-initiated-sso",
      "title": "IdP-initiated SSO",
      "role": "content",
      "text": "`https://cloud.redis.io/#/login/?idpId=`\n\n1. In Ping Identity, go to **Administrators > Connections > Applications** and select your application name. Select the **Configuration** tab and select **Edit**.\n\n1. Go to **Target Application URL** and enter: **https://{enviroment}/#/login/?idpId={idpId}**, where idpId is the ID found in the Location field, after the last '/'\n\n1. Select **Save**.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_16.png)\n\n1. Go to **https://apps.pingone.com/{environment}/myapps/#**, where environment is the environment ID, found in **Administrators -> Environment** for your app.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/ping_identity_saml_17.png)\n\n   You are redirected to the Redis Cloud console."
    }
  ],
  "examples": []
}