Flexible Identity Federation

Transcription

1 Flexible Identity Federation User guide version 1.0.1

2 Publication History Date Description Revision initial release minor corrections Copyright Orange Business Services 2 of 36

3 Welcome Your company has chosen Flexible Identity Federation to protect online corporate identities and corporate data from unauthorized access. The information in this guide applies to the following Identity Management solutions: PingOne dock PingOne browser extension PingOne mobile app The information in this guide is intended for: Users: people in your company that will use the Flexible Identity Federation service. Administrators: people in your company that will manage the Flexible Identity Federation service. Copyright Orange Business Services 3 of 36

4 Contents 1 Overview What is SSO? Why use Flexible Identity Federation? What is PingOne Dock? What is PingOne Browser Extension? What is PingOne Mobile App? What are the simple gestures for mobile devices? PingOne Dock Introduction Connection PingOne dock customization PingOne Browser extension Introduction On Windows Platform Microsoft Internet Explorer Mozilla Firefox Google Chrome Apple OS X Mozilla Firefox Google Chrome PingOne App for ios Introduction Supported platforms Installation Access to an application Sign Off Uninstall the app PingOne App for Android Introduction Supported platforms Installation Copyright Orange Business Services 4 of 36

5 5.3 Access to an application Sign Off Uninstall the app Copyright Orange Business Services 5 of 36

6 1 Overview 1.1 What is SSO? Single Sign-On is a mechanism that allows users to authenticate once with their corporate credentials and get access to their company resources without the need for re-authentication. 1.2 Why use Flexible Identity Federation? The Flexible Identity Federation solution is a cloud-based identity service from Ping Identity that gives users one-click access to all their applications while providing your IT team with the security, compliance, and intelligence your business can t compromise on. 1.3 What is the PingOne dock? The PingOne dock is a web hub that displays all the corporate applications authorized for the user. One click on an icon automatically redirects them to the selected application. 1.4 What is the PingOne browser extension? The PingOne browser extension is a small component that is able to securely store and reuse the user s credentials for non-sso applications. 1.5 What is the PingOne mobile app? The PingOne mobile app is the PingOne dock optimized for mobile devices. Copyright Orange Business Services 6 of 36

7 1.6 What are the simple actions for mobile devices? The following terms are used in this document: Tap Drag Swipe Pinch/spread Copyright Orange Business Services 7 of 36

8 2 PingOne dock 2.1 Introduction Your PingOne dock link has been made available to you by your IT administrator. Once connected, the PingOne dock displays all applications authorized by your IT department depending on your profile within the company. 2.2 Connection Open your browser and enter your PingOne dock URL: (example The following form will appear: Username can be your address, your Windows account name (aka samaccountname) or your UPN (userprincipalname) depending on the configuration which has been applied by your IT administrator. Password is your corporate password. Once connected, all applications will be displayed in your personal dock Copyright Orange Business Services 8 of 36

9 You can now click on the application you want to work with without having to authenticate again. 2.3 PingOne dock customization Click on your username in the top-right of your dock and select [Customize]. You can now select the icon parameters for your dock You can also choose to hide or unhide applications by clicking on [+] or [ ] in the top-right corner of the icons 3 PingOne browser extension The basic SSO user experience requires the use of a specific browser extension. 3.1 Introduction This chapter will explain how a user can set up the PingOne browser extension on their computer. The browser extension is available for the following browsers: Windows: Internet Explorer Windows: Mozilla Firefox Windows: Google Chrome Mac: Mozilla Firefox Copyright Orange Business Services 9 of 36

10 Mac: Google Chrome The setup is basically the same for each browser: the user has to log in to the PingOne dock using a browser that does not have the browser extension. They will then be prompted to install the browser extension in order to use the basic SSO feature. Should the user skip this step and decide to install the browser extension at a later time, they can simply click on the dropdown menu next to the username and select [Install browser extension]. This is the procedure for each browser: 3.2 On Windows Platform Microsoft Internet Explorer For now, the PingOne browser extension is not compatible with the Internet Explorer private browsing mode. JavaScript must be enabled in the browser Supported platforms Supports 32-/64-bit: Browser Version Version 8. Version 9 (with Protected Mode disabled). Version 10 (with Enhanced Protected Mode disabled). Version 11 (with Enhanced Protected Mode disabled). Operating System Windows XP, Windows 7, Windows 8 Apple OS X, current version Installation Log in to the PingOne dock. Follow the automated prompt to install the PingOne browser extension. Copyright Orange Business Services 10 of 36

11 When prompted to Run or Save PingOne-Extension-x64.msi or PingOne-Extensionx86.msi (depending on your OS), click on [Run]. Click on [Install] in the PingOne browser extension 64-bit Setup Wizard. Copyright Orange Business Services 11 of 36

12 The PingOne browser extension will install and prompt the user to close Internet Explorer. Re-launch Internet Explorer and enable the PingOne browser extension. The prompt to enable the browser extension may vary depending on the version of Internet Explorer. Re-launch Internet Explorer after enabling the browser extension and log back into the PingOne dock. You ll see the PingOne browser extension icon to the right of the address bar window. The user can either create a new Privacy Key or enter one from an existing installation. Note that in Internet Explorer, the browser extension listed under Tools and "Manage Add-ons" will have a different version number from the PingOne browser extension listed in the Control Panel. For example, as of Nov 24th 2014, the version in IE is Copyright Orange Business Services 12 of 36

13 3.2.2 Mozilla Firefox For now, the PingOne browser extension is not compatible with the Mozilla Firefox private browsing mode. JavaScript must be enabled in the browser Supported platforms 2013 releases or later Installation Log in to the PingOne dock. Follow the automated prompt to install the PingOne browser extension. Copyright Orange Business Services 13 of 36

14 Click on [Allow]. Click on [Install Now]. Copyright Orange Business Services 14 of 36

15 Manually close Firefox and restart the browser. NOTE: There will be no prompt to restart. Access the PingOne dock and restart the page. The user will be prompted to enter a Privacy Key Google Chrome JavaScript must be enabled in the browser Supported platforms 2013 releases or later. Copyright Orange Business Services 15 of 36

16 Installation Log in to the PingOne dock. Follow the automated prompt to install the PingOne browser extension. Click on [Add] from the PingOne-Extension Chrome pop-up (Note: you may be taken to the Google webstore if you click on [Cancel]. In this case, click on the [free+] button and follow the remaining steps below). After installation, a confirmation message from Chrome will appear. The user will be prompted to enter their Privacy Key by the PingOne-Extension. Copyright Orange Business Services 16 of 36

17 3.3 Apple OS X Mozilla Firefox For now, the PingOne browser extension is not compatible with the Mozilla Firefox private browsing mode. JavaScript must be enabled in the browser Supported platforms 2013 releases or later Installation Log in to the PingOne dock. Follow the automated prompt to install the PingOne- Extension. Copyright Orange Business Services 17 of 36

18 Click on [Allow]. Click on [Install Now]. Copyright Orange Business Services 18 of 36

19 You ll be notified that PingOne-Extension has been installed successfully, and the extension icon will show up to the right of the address bar (Note: the icon will be grayed out). Access the PingOne dock and the user will be prompted to enter a Privacy Key Google Chrome JavaScript must be enabled in the browser Supported platforms 2013 releases or later Installation Log in to the PingOne dock. Follow the automated prompt to install the PingOne- Extension. Copyright Orange Business Services 19 of 36

20 Click on [Add] on the PingOne-Extension Chrome pop-up window (Note: you may be taken to the Google webstore if you click on [Cancel]. In this case, click on the [free+] button and follow the remaining steps below). After installing the extension, a pop-up will appear saying PingOne-Extension has been added to Chrome, followed by a prompt to enter a Privacy Key. Copyright Orange Business Services 20 of 36

21 4 PingOne App for ios 4.1 Introduction Use PingOne mobile with your PingOne account for single sign-on (SSO) access to your applications from your ipad or iphone. This app delivers the desktop experience of PingOne to your mobile device, allowing you to access your Flexible Identity Federation-protected applications and resources Supported platforms Apple ios 6.0 or later. Compatible with iphone, ipad, and ipod touch. PingOne App for ios is optimized for iphone Installation The PingOne App is available in the Apple App Store. Open the App Store application on your ios device. On the search bar, type PingOne. This is the PingOne app: Tap on the cloud icon to download and install the application. Copyright Orange Business Services 21 of 36

22 Once the application is downloaded and fully installed, the cloud icon is replaced by an open button. Tap on the open button to start the PingOne application. Accept the terms and conditions (it may be necessary to scroll down). When connecting for the first time, you will be asked for your company ID. Enter the company ID provided by your IT department. Tap on [Continue]. Enter your corporate credentials and tap on [Sign On]. Copyright Orange Business Services 22 of 36

23 Once authenticated, you can see your corporate application icons. As described in the PingOne Doc chapter, PingOne is able to store and reuse your credentials for non-sso applications. The mobile app can reuse these stored credentials but needs your privacy key. Your Privacy Key must have been initiated from the browser extension on a computer. Tap on the gear icon in the top-right to display the application menu: Copyright Orange Business Services 23 of 36

24 Tap on [Privacy Key]. Tap on [Continue] to validate your Privacy Key. 4.3 Accessing an application Open the PingOne application. (If needed) Enter your corporate credentials. Copyright Orange Business Services 24 of 36

25 Once authenticated, tap on the application icon of your choice. Once you get connected to the chosen application, you can tap on the icon (in the top-left) or swipe to the left to be redirected to the PingOne App dock. Copyright Orange Business Services 25 of 36

26 4.4 Signing off As some of your corporate applications may have sensitive data, it is advised to sign off from the PingOne application. Tap on the gear icon in the top-right to display the application menu: Tap on [Sign Off]. 4.5 Uninstalling the app Long tap on the PingOne icon. A small cross will appear on the top-left of the icons: Copyright Orange Business Services 26 of 36

27 Tap on the cross to uninstall the app. Tap on [Delete] to confirm. Copyright Orange Business Services 27 of 36

28 5 PingOne App for Android 5.1 Introduction Use PingOne mobile with your PingOne account for single sign-on (SSO) access to your applications from your Android device. This app delivers the desktop experience of PingOne to your mobile device, allowing you to access your Flexible Identity Federation-protected applications and resources Supported platforms Google Android 4.0 or later. 5.2 Installation The PingOne App is available in the Google Play Store. Open the Play Store application on your Android device. On the search bar, type PingOne. Tap on the PingOne application. Copyright Orange Business Services 28 of 36

29 Tap on [Install]. Validate the permissions by tapping on [Accept]. The download will start automatically: Copyright Orange Business Services 29 of 36

30 Once the download and the installation are complete, tap on [Open]. Accept the terms and conditions (it may be necessary to scroll down). Copyright Orange Business Services 30 of 36

31 When connecting for the first time, you will be asked for your company ID. Enter the company ID provided by your IT department. Tap on [Continue]. Enter your corporate credentials in order to connect: Copyright Orange Business Services 31 of 36

32 Once authenticated, you can see your corporate application icons. As described in the PingOne dock chapter, PingOne is able to store and reuse your credentials for non-sso applications. The mobile app can reuse these stored credentials but needs your privacy key. Your Privacy Key must have been initiated from the browser extension on a computer. Tap on the gear icon in the top-right to display the application menu. Then tap on [Privacy Key]. Enter your [Privacy Key]. Copyright Orange Business Services 32 of 36

33 Tap on [Continue] to validate your Privacy Key. 5.3 Accessing an application Open the PingOne application. (If needed) Enter your corporate credentials. Once authenticated, tap on the application icon of your choice. Copyright Orange Business Services 33 of 36

34 Once you get connected to the chosen application, you can tap on the return button to get back to the dock. 5.4 Signing off As some of your corporate applications may have sensitive data, it is advised to sign off from the PingOne application. Tap on the gear icon in the top-right to display the application menu: Copyright Orange Business Services 34 of 36

35 Tap on [Sign Off]. Confirm by tapping on [Yes]. 5.5 Uninstalling the app Go to the Google Play Store. On the search bar, enter PingOne. Tap on the PingOne app: Tap on [Uninstall]. Copyright Orange Business Services 35 of 36

36 Confirm by tapping on [OK]. Copyright Orange Business Services 36 of 36