I've read through the documentation I can find in regards to SSO and user accounts. There is a lot of good high-level stuff, but I have one simple question - how do I get into pingfederate and see what the SSO setup is? We have it enabled, but are adding user accounts into the Apptio console directly. I'd like to leverage as much as possible.

Thanks,

Tim

So, what I ended up doing was hitting active directory to pull users' mail attribute, indicating their SSO ID. So, we still have to grant them access to the tool, but using the right address (cause some people have up to 8-10 email addresses here).

Having said that, the provided documentation still indicates that roles should be directly granted to SSO users, rather than simply passing authorization.

Tim - to get SSO user roles passed into pingFed, there needs to happen a config update on the PingFed. This is currently done by Apptio, and is not yet exposed to end users. Please open a support ticket to make this happen

@Arpitha Dhanapathi Thank you very much for the response, I had wondered if that were the case. Is there a timeline for when this functionality will be in our hands?

Hi Tim, we don't have a firm timeline yet on this, but we are starting down a path that potentially leads to self-serve SSO.  We appreciate your interest!