Overview

Spendflo provides SAML 2.0 integration to its user base, who use Ping Identity as their IAM solution. With this integration, the users will be able to login to Spendflo seamlessly with their Ping Identity account. o.

Follow the steps mentioned in this article to install Ping Identity on Spendflo.

Configuration in Ping Identity

Create a new application on Ping Identity

Inside Ping Identity Console, click on Applications. Then click the Add button to create a new Application.

Select application type

Enter the Application details and select SAML Application as the Application Type. Then click "Configure".

Enter details

Select "Manually Enter" and enter the following details

• ACS URL - https://auth.spendflo.com/auth/saml/callback
• Entity ID - production

Edit configuration

Once added, go to the configuration tab and edit the configuration.

Update configuration

Select the SUBJECT NAMEID FORMAT as format:emailAddress

Attribute Mappings

Select the Attribute Mappings tab. For the saml_subject attribute, select Email Address as the PingOne Mappings.

Configuration in Spendflo for Ping

Once you have configured the credentials in Ping Identity, follow the steps here to complete the integration of Spendflo and Ping Identity.

Update Settings

1. Inside Spendflo, go to Settings in the top Navigation Bar.

2. Select Users in the left nav and go to Edit User Role

2. Select SSO in the left navigation and then click Setup SSO Connection

Configure Custom SAML

1. Click Custom SAML Application

2. Click Configure Manually

Get Credentials from Ping Setup

1. Go to PingIdentity, select the Spendflo application that you just configured. Get the Single Sign-on Service URL and download the Signing Certificate

2. Paste the Single Signon Service URL from Ping in the SSO Endpoint. And paste the certificate that you just downloaded into Public Certificate

3. Once completed, click Continue to Claim Domain

Enter domain name in Spendflo App

1. Come back to Spendflo and enter the domain name of your organisation. In the screenshot below, replace spendflo.com with your email domain using when you will be logging in to Spendflo then click "Proceed"

2. Claim the domain by adding the given TXT record to the DNS settings in your DNS provider.

3. Once validated, your domain is setup and the SSO configuration is complete.