Stay organized with collections
Save and categorize content based on your preferences.
This section explains how to configure SSO using Ping to use
use enterprise-wide Ping credentials to sign in to Contact Center AI Platform (CCAI Platform) and
the agent adapter. Ping SSO uses the Security Assertion Markup Language (SAML)
authentication protocol.
Before you begin
To configure SSO using Ping, be sure you have the following:
A Ping account
An SSO URL
An entity ID
An email mapping field, usually Name ID
A SAML certificate (in Base64)
CCAI Platform administrator credentials
Configure Ping for SSO
To configure Ping, follow these steps:
Sign in to your existing Ping account.
Using this Ping documentation as
a guide, select the tab for the specific product you have. The products
available include the following:
PingFederate
PingOne
PingOne for Enterprise
Follow the specific instructions for your Ping product. At the end of the
setup for your product, you should have obtained the following:
Login URL
Ping AD Identifier
Email name or Name ID
Certificate
When these are obtained, continue to configure your CCAI Platform portal instance
for SSO.
Configure your CCAI Platform instance for SSO
To configure SSO for your CCAI Platform instance, follow these steps:
In the Google Cloud console, go to the project selector dashboard and select the project that
contains your instance.
In the Name column, click the instance that you want to configure SSO for.
On the CCAI Platform instance Detail page, click editEdit.
For the login method, select SAML.
In the Single sign-on URL field, enter your SSO URL.
In the Entity ID field, enter your entity ID.
In the Email field mapping field, enter a text string such as Email name or
Name ID. This is used as a label for the email name field on the SSO sign-in page.
In the Authentication contexts field, select the authentication context that you want. If
your IdP configuration doesn't require the authentication context to be specified, then leave this
field empty. For more information, see Authentication context.
In the Certificate field, enter your SAML certificate. Be sure to include
-----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- from the
certificate.
Click Save.
Verify SSO authentication
To verify SSO authentication, follow these steps:
Go to the agent adapter in your customer relationship management (CRM)
application.
Click Login with company SSO. A sign-in page displays.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-25 UTC."],[[["\u003cp\u003eThis guide outlines how to configure Single Sign-On (SSO) for the Contact Center AI Platform (CCAI Platform) and agent adapter using Ping, leveraging the SAML authentication protocol.\u003c/p\u003e\n"],["\u003cp\u003eConfiguring Ping for SSO involves signing into your Ping account, selecting your specific Ping product (PingFederate, PingOne, or PingOne for Enterprise), and obtaining the Login URL, Ping AD Identifier, Email name or Name ID, and Certificate.\u003c/p\u003e\n"],["\u003cp\u003eSetting up CCAI Platform for SSO requires selecting the SAML login method, inputting the Login URL, Entity ID, email field mapping, and certificate details obtained from Ping, and saving the configuration.\u003c/p\u003e\n"],["\u003cp\u003eVerifying SSO authentication involves attempting to log into the agent adapter using the "Login with company SSO" option and using your existing Ping credentials.\u003c/p\u003e\n"]]],[],null,["# Configure SSO using Ping\n\nThis section explains how to configure SSO using Ping to use\nuse enterprise-wide Ping credentials to sign in to Contact Center AI Platform (CCAI Platform) and\nthe agent adapter. Ping SSO uses the Security Assertion Markup Language (SAML)\nauthentication protocol.\n\nBefore you begin\n----------------\n\nTo configure SSO using Ping, be sure you have the following:\n\n- A Ping account\n- An SSO URL\n- An entity ID\n- An email mapping field, usually Name ID\n- A SAML certificate (in Base64)\n- CCAI Platform administrator credentials\n\nConfigure Ping for SSO\n----------------------\n\nTo configure Ping, follow these steps:\n\n1. Sign in to your existing Ping account.\n\n2. Using this [Ping documentation](https://docs.pingidentity.com/r/en-us/solution-guides/htg_config_saml_app) as\n a guide, select the tab for the specific product you have. The products\n available include the following:\n\n - PingFederate\n\n - PingOne\n\n - PingOne for Enterprise\n\n3. Follow the specific instructions for your Ping product. At the end of the\n setup for your product, you should have obtained the following:\n\n - Login URL\n - Ping AD Identifier\n - Email name or Name ID\n - Certificate\n4. When these are obtained, continue to configure your CCAI Platform portal instance\n for SSO.\n\nConfigure your CCAI Platform instance for SSO\n---------------------------------------------\n\nTo configure SSO for your CCAI Platform instance, follow these steps:\n\n1. In the Google Cloud console, go to the project selector dashboard and select the project that contains your instance.\n\n [Project selector dashboard](https://console.cloud.google.com/projectselector2/home/dashboard)\n\n \u003cbr /\u003e\n\n2. In the navigation menu, click **CCAI Platform** .\n\n\n [CCAI Platform instances](https://console.cloud.google.com/contact-center-ai-platform)\n\n \u003cbr /\u003e\n\n The **CCAI Platform instances** page displays.\n3. In the **Name** column, click the instance that you want to configure SSO for.\n4. On the **CCAI Platform instance Detail** page, click edit **Edit**.\n5. For the login method, select **SAML**.\n6. In the **Single sign-on URL** field, enter your SSO URL.\n7. In the **Entity ID** field, enter your entity ID.\n8. In the **Email field mapping** field, enter a text string such as `Email name` or `Name ID`. This is used as a label for the email name field on the SSO sign-in page.\n9. In the **Authentication contexts** field, select the authentication context that you want. If your IdP configuration doesn't require the authentication context to be specified, then leave this field empty. For more information, see [Authentication context](/contact-center/ccai-platform/docs/authentication-context).\n10. In the **Certificate** field, enter your SAML certificate. Be sure to include `-----BEGIN CERTIFICATE-----` and `-----END CERTIFICATE-----` from the certificate.\n11. Click **Save**.\n\nVerify SSO authentication\n-------------------------\n\nTo verify SSO authentication, follow these steps:\n\n1. Go to the agent adapter in your customer relationship management (CRM)\n application.\n\n2. Click **Login with company SSO**. A sign-in page displays.\n\n3. Sign in with your Ping credentials."]]
