Ping Identity | PingFederate

[jamiehynds]

Description

Ping Identity provides federated identity management and self-hosted identity access management to web identities via attribute based access controls. This Single sign-on (SSO) gives users a single set of credentials to access applications web applications, apps on mobile devices, VPN, etc.

Ping provides both software and SaaS-delivered components. PingFederate (SSO), PingAccess, (proxy) and PingDirectory are software-delivered products. SaaS services include PingID, PingIntelligence for APIs, and two bundles, Ping One for Enterprise (SSO, MFA, Directory), and Ping One for Customers (SSO, MFA, Directory, self-service).

This scope of this issue is limited to Ping Federate events, which includes both SSO and MFA events.

Architecture

PingFederate records a subset of transaction log information to facilitate security auditing and regulatory compliance. Activities from SSO, SLO, OAuth, and SCIM inbound provisioning transactions are recorded in the security audit log, the audit.log file, located in the /pingfederate/log directory. Security audit log information may be output to different formats, including databases, CEF, and Splunk. Documentation available here.

Integration release checklist

This checklist is intended for integrations maintainers to ensure consistency when creating or updating a Package, Module or Dataset for an Integration.

All changes

• [ ] Change follows the contributing guidelines
• [ ] Supported versions of the monitoring target are documented
• [ ] Supported operating systems are documented (if applicable)
• [ ] Integration or System tests exist
• [ ] Documentation exists
• [ ] Fields follow ECS and naming conventions
• [ ] At least a manual test with ES / Kibana / Agent has been performed.
• [ ] Required Kibana version set to:

New Package

• [ ] Screenshot of the "Add Integration" page on Fleet added

Dashboards changes

• [ ] Dashboards exists
• [ ] Screenshots added or updated
• [ ] Datastream filters added to visualizations

Log dataset changes

• [ ] Pipeline tests exist (if applicable)
• [ ] Generated output for at least 1 log file exists
• [ ] Sample event (sample_event.json) exists

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

[botelastic[bot]]

Hi! We just realized that we haven't looked into this issue in a while. We're sorry! We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1. Thank you for your contribution!

[jamiehynds]

Keeping this open.

[botelastic[bot]]

Hi! We just realized that we haven't looked into this issue in a while. We're sorry! We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1. Thank you for your contribution!