Ping Identity

Single sign-on for Empuls with
Ping Identity

Let employees sign in to Empuls with their Ping Identity credentials over SAML 2.0.

Book a demo

Get a personalised walkthrough. We respond within one business day.

What you can do

Four things you get once Ping Identity is connected

Ping Identity handles identity. Empuls accepts the sign-in, so access follows the rules your IT team already manages.

Sign in with the credentials people already have

SAML 2.0 single sign-on
Employees sign in through Ping Identity with their organizational credentials and return to Empuls signed in.
Credentials stay in Ping Identity
Authentication happens in Ping Identity. Empuls receives the SAML response and does not need a separate password for your employees.

Flexible identity matching

Email or Employee ID
Empuls needs a unique identifier in the NameID field. Use either the Email ID or the Employee ID.
Simple attribute mapping
Map the SAML_SUBJECT attribute to the email address that matches the user's Empuls login.

Set up your way

Metadata import
Import the Empuls SP metadata into Ping Identity. This is the recommended route.
Manual entry
Prefer to configure by hand? Enter the ACS URL and Entity ID directly in the Ping Identity application.

Fits the way IT already works

Built-in connection test
After uploading the Ping Identity IdP metadata, use Test Connection in Empuls to confirm the sign-in works.
No custom code
Setup uses standard SAML metadata files exchanged between Ping Identity and Empuls.

Use cases

Who uses it, and what for

Three ways teams use Ping Identity SSO with Empuls.

Employees

One login for everyday access

Employees reach Empuls with the same Ping Identity credentials they use for other work apps. Fewer passwords to remember and reset.

IT and Security

One access path through Ping Identity

Route every Empuls sign-in through Ping Identity so access follows the policies your security team already enforces.

Identity admins

Keep access control in Ping Identity

Your identity team continues to manage authentication in Ping Identity, with Empuls added as one more SAML application.

How it works

From Ping Identity app to signed-in employee

Step 1

Get the SP metadata from Empuls

In Empuls, go to Reports and Admin, then User Authentication, and obtain the service provider metadata.

Step 2

Add a SAML web app in Ping Identity

In the Ping Identity Admin Console, add a new Web App with SAML under Connections, then import the metadata or enter the ACS URL and Entity ID.

Step 3

Map attributes and upload the IdP metadata

Map NameID to the email address, enable the app, download the IdP metadata from Ping Identity, and upload it to Empuls.

Step 4

Test the connection

Click Test Connection in Empuls and confirm the Ping Identity login succeeds.

Setup

SAML 2.0 setup in Ping Identity and Empuls

Your admin configures a SAML web app in Ping Identity and uploads its metadata to Empuls.

Integration type

Native SSO integration for Empuls using Ping Identity.

Protocol

SAML 2.0.

NameID

A unique identifier: Email ID or Employee ID. SAML_SUBJECT maps to the email address.

Required values

ACS URL, Entity ID, or the SP metadata XML file from Empuls.

Common Questions

Frequently asked questions

Common questions from IT admins and security reviewers evaluating Ping Identity SSO for Empuls.

Still have a question? Talk to us
SAML 2.0. You add a SAML web app in Ping Identity and exchange metadata with Empuls.
Empuls requires a unique identifier in the NameID field. You can use the Email ID or the Employee ID.
The SP metadata XML file, or the ACS URL and Entity ID if you configure manually. You find these under Reports and Admin, then User Authentication.
The Empuls help guide lists SSO status for Ping Identity as mandatory.
Make sure your browser pop-up blocker is disabled, the user's email exists in both Ping Identity and Empuls, and the NameID mapping matches the user's email.
The Empuls help center has the full Ping Identity SSO setup guide. A link is in the Setup section of this page.

See it in your own Ping Identity setup

A 30-minute call. We'll walk through the SAML settings, NameID options, and how to roll out SSO to your organization.

Book a demo