Pingfederate Video tutorial

Pingfederate Video Tutorial

Introduction to Pingfederate:

PingFederate is a full-featured federation server that provides secure single sign-on, API security for enterprise customers, partners, and employees. Users can securely access the applications they need with a single identity using any device. Supporting all of the current identity standards including SAML, WS-Federation, WS-Trust, OAuth and OpenID Connect. The PingFederate server includes rich integration components for identity stores like Active Directory, LDAP, web access management systems and multi-factor authentication systems.

Prerequisites:

To integrate PingFederate with (PWS), you need:

• A PingFederate user with Administrator privileges.
• (IAM) Identity and Access Management Engineers
• IAM Consultants / Engineers
• IAM Architects
• Fresher’s

Course Content for Pingfederate

Session 1

• What is Identity and Access Management
• What is Authentication and Authorization
• What is Provisioning
• What is Single Sign On / Federation
• What is Single Sign on for One Domain
• What is Single Sign On for Multiple Domains
• What is Identity Federation
• What is Identity Provider and Service Provider?
• What is the purpose of SAML and how it looks like?
• What are SAML Assertions, SAML Bindings and SAML Profiles
• What is Single Log Out (SLO)
• What are Integration Kits?
• What is first mile and last mile integrations?

Session 2

• How to set SSO for administrative UI?
• Authentication and Role based access for Admin UI

Session 3

• How to implement multifactor authentication with PingFederate?
• What is adapter chaining?
• What is Composite Adapter?

Session 4

• How to back up a PingFederate configuration store
• How to restore a configuration store?

Session 5

• What is Clustering?
• How PingFederate clustered infrastructure is generally designed?
• How Load Balancer should be configured?
• How to optimize the performance of Clustered infrastructure?  

Session 6

• How to renew / manage SSL certificates?
• Manage Signing and Encryption Certificates
• How to do a certificate rollover with minimal downtime?
• What is Certificate Revocation Checking?
• Which protocols does PingFederate support to verify revoked certificates?

Session 7

• What is OAuth2.0 protocol?
• Why OAuth?
• Where does it best fits in?
• The terminologies involved in OAuth2.0
• What are the grant types of OAuth2.0?
• Discuss all the grant types: Authorization Code, Implicit, Resource Owner Password Credentials and Client Credentials
• What is a refresh_token?
• What are the endpoints available in PingFederate to support OAuth2.0?
• How Openid Connect evolved?
• What is Openid Connect?
• What is the format of openid connect token?
• How does a JWT token look like?
• What is a User Info Endpoint?
• What are scopes in OAuth?
• What are the endpoints available to support Openid Connect?
• How an access_token is validated?

Session 8

• What is a web service?
• What is a SOAP message?
• How the security of SOAP messages is maintained?
• What are security tokens?
• What are various types of Security Tokens?
• What is XML Signature and XML Encryption?
• How security tokens are issued, validated and renewed?
• What is Security Token service?
• What is a Request Security Service (RST) and Request Security Token Response (RSTR)?
• What is WS-Security?
• What is WS-Trust?
• What are token processors and token generators?
• How PingFederate supports WS-Trust protocol?

Session 9

• How a license file can be renewed?
• How to export a metadata?
• How to get a signed metadata?
• How to set Redirect Validation?

Session 10

• What are the logs available in Pingfederate?
• What kind of information gets logged in each kind of logs?
• How to enable tracing?
• How to setup monitoring of PingFederate?
• SAML Troubleshooting Tools

Session 11

• What are the factors involved with PingFederate performance?
• How to tune these factors to have optimal performance?

pingfederate advantages :

• Increased security risk from numerous passwords.
• High expenditures due IT provisioning and maintenance.
• Decreased use of websites and apps because of tedious passwords.
• Distant partner relationships due to burdensome integration systems.
• Slow identity management integration after a merger and acquisition.

overview :

PingFederate is a federation server that provides identity management, single sign-on, and API security for the enterprise. This documentation describes how to configure a single sign-on partnership between PingFederate as the Identity Provider (IdP) and the Single Sign-On Service (SSO) for Pivotal Web Services (PWS) as the Service Provider (SP).

 SSO supports service provider-initiated authentication flow and single logout. It does not support identity provider-initiated authentication flow. All SSO communication takes place over SSL.