How to enroll NetBackup Flex Scale primary server as a service provider to PingFederate when the cluster is deployed with both NetBackup primary and media servers
Description
To enroll NetBackup Flex Scale master server as a service provider to PingFederate
Open Account on https://www.pingidentity.com/en.html
Log on to the Ping Identity admin console, and select the Applications tab.
Click on + to create a new application. In the Add Application form, provide the Application name, select SAML Application and click Configure.
Select SAML Configuration as Manually enter and enter the ACS URLs and Entity ID.
ACS URL: https://<nbu-primary-server-name>/netbackup/sso/callback/SAML2Client
Entity ID: https://<nbu-primary-server-name>/netbackup/sso/callback/SAML2Client
Click on SAML to edit values. Select Sign Assertion & Response and click Save.
Click on the Toggle button to start the Application.
Go to Attribute Mapping and add the attribute userPrincipalName as Username, memberOf as Group Names and click Save. (userPrincipalName and memberOf Attributes are the default userField and user groups field values expected by the NetBackup Flex Scale in SAML response).
From the Configuration screen, download the metadata XML.
Go to NetBackup Flex Scale UI. Go to Settings > Security > Single Sign-on.
Click on Add and give the IDP name. Upload the downloaded IDP metadata XML and click Save.
Related Knowledge Base Articles
How to enroll NetBackup Flex Scale primary server as a service provider in ADFS
How to enroll NetBackup Flex Scale primary server as a service provider to Okta