Answer
PingIdentity (PingOne) SSO/SAML and Manual User Sync
Prerequisite: Verify Domain in the Foxit Admin Console
- Open Foxit Admin Console
- Navigate to Settings > Directory Setting > Verify Domain / Domain Settings
- You can verify domains in the following two methods:
- DNS Method – Copy a TXT record to your domain name system. (Recommended)
- Type -> TXT
- Host/Name -> @ or leave blank
- TXT Value -> (Copy>Paste from Foxit Admin Console under
- TTL -> 1 Hour
- HTTPS Method – Upload an HTML file to the root folder of your domain’s website.
- After uploading the HTML file or adding the TXT record, click Verify Domain.
- In the pop-up dialog box, select TXT Record or HTTPS correspondingly, enter the domain you want to verify in the Domain field, and click Verify domain.
- Then the domain will be added to the Verified Domains List, and you can view the verification status. The status of a domain may show Unverified. Verifying domains using DNS may take up to 72 hours for your domain to verify and DNS changes to take effect. Then you can click Verify in the Actions column to verify again.
To remove a domain from the list, click Remove in the Actions column. When a verified domain is removed, the users with that domain are no longer managed and won't appear on your managed account page
PingIdentity (PingOne) SSO/SAML Configuration
This article explains how to configure PingIdentity Single-Sign-On (SSO) with the Foxit Admin Console so that users activate our solutions (Foxit PDF Editor, Foxit Sign... etc.) using your organizations SSO.
These instructions may vary depending on your environment. If you have specific settings, you may need to check those with your IdP admins as Foxit only supports SSO as it is written in this article.
1. Add Application
Login to PingIdentity and Click on Connections from the left sidebar
Click Application → Add Application
Click WEB APP → Configure
2. Create App Profile
Enter the APPLICATION NAME and DESCRIPTION, and upload the ICON, then click Next. (We recommend using the Foxit icon in the attachments section.)
Choose Manually Enter
Enter the SP Assertion Consumer Service URL of Admin Console into ACS URLS of PingIdentity
Enter the SP Entity ID of Admin Console into ENTITY ID of PingIdentity
Select x509 PEM(.crt) certificate → Download Signing Certificate. (We will need it later)
Select SUBJECT NAMEID FORMAT:
Enter 180 for ASSERTION VALIDITY DURATION (IN SECONDS)
Then click Save and Continue
3. Attribute Mapping
Click ADD ATTRIBUTE → PingOne Attribute
Add the mapping Email Address to email and Username to username → Click Save and Close
Enable the User access option
4. Copy Data to Admin Console
Click Configuration → Collect ISSURE ID and SINGLE SIGNON SERVICE
Fill these items into the corresponding input fields of the Admin Console form → Copy the contents of the Certificate downloaded on step 2 → Click Save configuration
PingIdentity (PingOne) User Sync Configuration
These instructions may vary depending on your environment. If you have specific settings, you may need to check those with your IdP admins as Foxit only supports this function as written in this article.
1. Add Application
Click Connections → Connections → Add Application
Click WORKER , choose Worker App , click Configure
Create App Profile, click Save and Continue
On the Attribute Mapping screen select Save and Close
Enable the User access option
The application needs to be granted roles, otherwise, the synchronization will fail.
Roles>ldentity Data Read Only>Check Administrators
After saving, it will show
Click Configuration → collect CLIENT ID and CLIENT SECRET
Get ENVIRONMENT ID
2. Configure Admin Console User Sync
Settings, select Directory Setting and choose PingIdentity Connector → Input CLIENT ID, CLIENT SECRET, ENVIRONMENT ID collected in step 1 into ClientID , ClientSecrets and EnvID of Admin Console respectively, then click Authorize
Click Sync Users