Administrative SSO lockout
If you misconfigure administrative single sign-on (SSO) and are locked out of the PingAccess administrative console, you can disable SSO and sign on using the native sign-on.
Choose one of the following methods to disable SSO:
-
If you can start the PingAccess server or the administrative node in a cluster, refer to Editing
run.propertiesto disable SSO. -
If you didn’t disable basic authorization, refer to Using the administrative API to disable SSO.
-
If basic authorization is disabled, but administrative API OAuth is enabled, refer to Using the administrative API and a new token to disable SSO.