How to integrate WSO2 API Manager (AM) 1.10.0 with PingFederate SAML 2.0?

Question

How to integrate WSO2 am 1.10.0 with PingFederate SAML 2.0? Any instructions?

From WSO2 web site, I only saw docs on how to set up SSO among WSO2 products: https://docs.

Answer 1

Basically, you can do this by adding PingFederate as an IDP in WSO2 AM and configuring federated SAML SSO configurations. An example of how to achieve this with Shibboleth is given in [1]. You can follow the same steps to do any configurations according to your requirement.

Refer [2] for configuring SAML SSO Federated authenticator in general

[1] https://docs.wso2.com/display/IS510/How+To%3A+Configure+Shibboleth+IdP+as+a+Trusted+Identity+Provider

[2] https://docs.wso2.com/display/IS510/Configuring+SAML+2.0+Web+SSO

Answer 2

I can confirm that this can be done without adding a separate wso2 IS server into the picture. I fixed several issues (Cannot generate keys, cannot publish APIs, etc..) by: What I did to fix the issue was to 1) add admin user inside ApiKeyValidaor in api-manager.xml also into admin user via management console and into user-mgt.xml; 2) Inside api-manager.xml:

Change the following:

https://${carbon.local.ip}:${mgt.transport.https.port}${carbon.context}/services/

to: https://[FQDN_OF_HOST}:${mgt.transport.https.port}${carbon.context}/services/

Reason is my server certificate only recorded the domain name, not ip address.

The solution was also mentioned here: wso2 am 1.10.0 API Store: "Error occurred while executing the action generateApplicationKey" with " Invalid credentials provided."