Configuring PingOne SAML 2.0 SSO for Admin Console

Objective

Configuration of PingOne (also known as Ping Identity) and 8x8 Admin Console for SAML 2.0 SSO user login.

At this time, PingOne active user sync (SCIM) to 8x8 is not supported.

Applies To

• PingOne identity management
• 8x8 Admin Console
• SAML 2.0 SSO

Procedure

You'll need to perform the following as an admin of both PingOne and 8x8 Admin Console:

• Add the 8x8 Application to PingOne
• Set Up Identity Management in 8x8 Admin Console
• Configure a User in 8x8 Admin Console for SSO Login
• 8x8 Work Desktop SSO Login Process

Add the 8x8 Application to PingOne

To begin, you'll need to add the 8x8 application to your PingOne configuration.

1. From Applications > My Applications, make sure the SAML tab is selected.
2. Click on Add Application and select Search Application Catalog.
   
   
   

3. In Application Catalog, search for 8x8 if needed.
4. Click on the arrow at the far right of the 8x8 app to expand the app details.
   
   
   

5. Click Setup.
   
   
   

6. Click Download from Signing Certificate to download the .crt certificate file. You'll need this file later, when you configure SSO in your 8x8 Admin Console account.
• If you have more than one certificate type available, select an option that will provide a PEM formatted certificate, which is the required type for 8x8 SSO authentication.
7. Copy the URLs from the following fields (or return to this window later). You’ll need these later, as well.
• Issuer
• Initiate Single Sign-On (SSO) URL
8. Scroll down and click Continue to Next Step.
   
   
   

9. In section 2. Connection Configuration, verify that the ACS URL and Entity ID fields both contain the following URL: https://sso.8x8.com/saml2
10. Scroll down and click Continue to Next Step.
    
    
    

11. In section 3. Attribute Matching, nothing is required to be changed from the default settings. Click Continue to Next Step.
12. In section 4. PingOne App Customization - 8x8, nothing is required to be changed from the default settings. Click Continue to Next Step.
13. In section 5. Group Access, click Add for any user groups that should have access to 8x8 application authentication. Then click Continue to Next Step.
    
    
    

14. In section 6. Review Setup, review your configuration information compiled from all of the previous steps.
15. Scroll down and click Finish.
16. You'll be returned to the Application Catalog, where the 8x8 application should now be marked as Installed. Continue with steps for configuring 8x8 Admin Console, below.

Set Up Identity Management in 8x8 Admin Console

Next, you'll configure your 8x8 account to allow the use of your PingOne SSO service.

1. From https://vo-cm.8x8.com, log into your 8x8 Admin Console account.
2. From Home, click on Identity Management.
   
   
   

3. Click the check box for Single Sign-On (SSO) to enable it.
• Note that 8x8 supports only one ID management app per account.
4. Un-check the 8x8 Username and Password check box only if you want to prevent users from authenticating with 8x8 Work credentials.
• Doing this will allow only the SAML SSO identity provider credentials to be used.
• Keep the 8x8 Username and Password check box checked if users should be allowed to use both authentication methods.
5. Select Other SAML SSO Provider. The screen will expand with more configuration options.
   
   
   

Now you simply need to fill in the blanks with the information you collected earlier, and upload your PingOne certificate.

6. In SAML SSO Provider Information > SAML SSO Provider Name, enter a label you want for this SSO provider. 
7. Match the 8x8 fields with the PingOne URL information you collected earlier, and add the PingOne URLs into the appropriate fields in SAML Settings.

8x8                                     PingOne

IDP Login URL             >    Initiate Single Sign-On (SSO) URL

IDP Issuer URL/URN   >    Issuer URL

8. In Certificate in use, click on Click to attach a certificate file and choose the PingOne certificate you downloaded earlier. The file name of the certificate will appear in the field.
   
   
   

9. Finally, click Save at the bottom of the page. You should see a green confirmation banner for a few seconds at the top of the screen.
10. Continue with the next steps below to make the necessary changes to your 8x8 users in Admin Console.

Important: If after saving you find that you’ve made a mistake with the certificate, just un-check the Single Sign-On (SSO) check box and click Save to clear out the SSO information. Then follow the above process again with the correct information. The URLs can be edited without clearing the entire SSO configuration.

Configure a User in 8x8 Admin Console for SSO Login

This is a very quick process for an 8x8 user's login configuration.

1. In 8x8 Admin Console, click on Home > Users.
   
   
   

2. Search for the user you’re configuring, and click the pencil icon to edit the user.
   
   
   

3. Scroll down to Single Sign-On (SSO) and add the user’s PingOne Username to the Federation ID field. Note: This field only appears after an identity provider is configured in Identity Management.
4. Click Save.
   
   
   

5. You should then see a green confirmation banner at the top of the screen for a few seconds.

This completes the 8x8 Admin Console configuration of PingOne. Your configured users should now be able to log into 8x8 applications such as 8x8 Work Desktop. A brief example of the 8x8 Work login process is shown, below.

8x8 Work Desktop SSO Login Process

This login process may vary, depending on the PingOne administrator’s configuration of that service.

1. First, launch 8x8 Work Desktop on your PC.
2. Enter the PingOne Username of the assigned user into the 8x8 Username or Email field and click Continue.
3. Click Log in using SSO.
4. In the PingOne Sign On page, Enter the user’s Username and associated Password.
5. Click Sign On.
   
   
   

6. This will complete the user's login to 8x8 Work Desktop.
   
   
   

Other login options and login persistence may be available depending on the PingOne administrator’s configuration of that service.

Login Issues

Invalid SAML Profile

If users receive the error Invalid SAML profile error: No valid certificate found when attempting to log in to an 8x8 app, the PingOne certificate was probably not added to the 8x8 Admin Console account.

Note: 8x8 uses only PEM-formatted certificates. If you've already applied a certificate to Admin Console, you should confirm that the certificate you are using is the PingOne certificate supplied for the 8x8 application. In this case, you would need to clear the Admin Console Identity Management information, and re-apply the correct certificate and URL data.

1. In PingOne, navigate to Applications and click on the arrow to expand the 8x8 application info.
   
   
   

2. Scroll down to signing Certificate and click Download to download and save the certificate, as needed.
   
   
   

3. Using the configuration steps above, add the certificate to your 8x8 Admin Console Identity Management setup, and click Save.
   
   
   

We could not verify your SSO account 

If users see this error when attempting to log in, the configuration in either PingOne or 8x8 Admin Console could be incorrect, and should be reviewed and corrected as needed.

If the applications are correctly configured, then the 8x8 user profile in Admin Console is not configured correctly.

• We could not verify your SSO account. Please contact your 8x8 administrator.

To correct the user configuration issue, verify that the Admin Console user profile in Home > Users has the correct PingOne Username applied to the Single Sign-On > Federation ID field.

 

• Related Articles

• Configuring OneLogin SAML 2.0 SSO for Admin Console

  Objective Configure OneLogin and 8x8 Admin Console for SAML 2.0 SSO user login. At this time, OneLogin active user sync (SCIM) to 8x8 is not supported. Applies To OneLogin identity management 8x8 Admin Console SAML 2.0 SSO Procedure You'll need to ...

• Configuring SAML 2.0 or Google Auth SSO for 8x8 Services

  Objective Configuring Google Single Sign On (SSO). Applies To 8x8 Admin Console Google SSO SAML 2.0 Procedure Log in to Admin Console as an administrator. Navigate to Home > Identity and Security. To allow users to log in with either SSO or their 8x8 ...

• Configuring Okta SAML 2.0 SSO for 8x8 Admin Console

  Objective Configure Okta SAML 2.0 SSO for Admin Console. Applies To Admin Console Okta SSO Procedure This is a basic configuration walkthrough for Okta and Admin Console, to provide Okta SAML SSO login for 8x8 Work users. Add the 8x8 SAML Application ...

• Azure (Entra) AD: 8x8 Single Sign-On (SSO) and User Provisioning (SCIM) Configuration

  Objective Configure Microsoft Azure (Entra) SAML 2.0 SSO for Admin Console. Instructions and information covered in this article include: Configuring your Azure AD service and 8x8 Admin Console for Microsoft user SSO login to your 8x8 applications ...

• Enabling and Configuring Multi-Factor Authentication (MFA) in 8x8 X Series

  Objective Configuring and using multi-factor authentication (MFA) in 8x8 X Series. Applies To 8x8 X Series Login Security Objective Configuring and using multi-factor authentication (MFA) in 8x8 X Series. Applies To 8x8 X Series Login Security ...