MobileIron Integration Kit

Configuring a MobileIron Adapter instance

Configure the MobileIron Adapter to determine how PingFederate communicates with MobileIron.

Steps

  1. In the PingFederate admin console, go to Authentication > Integration > IdP Adapters. Click Create New Instance.

  2. On the Type tab, set the basic adapter instance attributes:

    1. In the Instance Name field, enter a name for the adapter instance.

    2. In the Instance ID field, enter a unique identifier for the adapter instance.

      The instance ID must contain only alphanumeric characters.

    3. In the Type list, select MobileIron Adapter <version>. Click Next.

  3. On the IdP Adapter tab, configure the adapter instance:

    1. In the Hostname field, enter the hostname for your MobileIron instance.

    2. In the API User Username field, enter your API user’s username.

    3. In the API User Password field, enter your API user’s password for querying the CPS API.

    4. Click Next.

  4. On the Extended Contract tab, configure any other attributes that you expect to receive. Click Next.

    The Extended Contract tab lists all the available attributes MobileIron can manage for devices. These are the attributes that can be used to make authentication decisions for your users. Learn more in Supported attributes reference.

  5. On the Adapter Attributes tab, set pseudonym and masking options as shown in Set pseudonym and masking options in the PingFederate documentation. Click Next.

  6. On the Adapter Contract Mapping tab, configure the contract fulfillment details for the adapter as shown in Define the IdP adapter contract in the PingFederate documentation.

    You can also find some contract fulfillment examples in Configuration examples.

  7. On the Summary tab, check your configuration, and then click Save.

Next steps

  1. Go to Authentication > Integration > IdP Adapters and open the configured X509 Adapter for editing.

  2. On the IdP Adapter tab, click Show Advanced Fields and select the Include Subject Alternative Name (SAN) checkbox.

  3. On the Extended Contract tab, edit the configuration to include the name of the subject alternative name key.

  4. Save the X509 Adapter configuration.