Integrating PrinterOn with Ping Identity

Setting

Description

Application Type

Register PrinterOn as a Web Application.

Client ID

Ping allows you to enter your own Client ID. Enter any value, such as PrinterOnServer or PrinterOnEnterprise.

The value you enter in Ping must also be entered in the Client ID field in the Third-Party Identity Management Service configuration in Configuration Manager.

Client Secret

PrinterOn requires a client secret to be generated and shared with PrinterOn Enterprise. This value must be entered in the Client Secret field in the Third-Party Identity Management Service configuration in Configuration Manager.

Allowed Grant Types

You should configure the following grant types:

• Authorization Code: Must be enabled. When enabled, Ping Identity returns an authorization code to the PrinterOn through a browser redirect. PrinterOn then exchanges the authorization code for an Access and Refresh Token. This is the most commonly used flow and will be used by the PrinterOn mobile apps, PrintWhere, and web print to provide a form for authentication

• Refresh Token: Must be enabled.

• Resource Owner Credentials: Must be enabled. This setting is used in conjunction with AirPrint. It allows PrinterOn to pass the user credentials through to AirPrint on the user’s behalf, since AirPrint has no means of allowing the user to enter them.

Redirection URLs

You must configure Ping Identity to use the following redirection URIs:

• The Web Print authentication URL:

  • https://<PrinterOn_ServiceURL>/servlet/LoginServlet

For example:

https://123.45.67.89/cps/servlet/LoginServlet

This URL must be accessible to external clients and must use SSL. This value will also impact the default Reply-URLs.

• The PrintWhere and PrinterOn Mobile App authentication URL: http://127.0.0.1:64000

Note: In some cases, Ping Identity may have issues redirecting to this URL. If you experience issues, add the following URL in addition to the URL specified above:

http://127.0.0.1:64000/

• PrinterOn Mobile App authentication URL:

https://sentinel.printeron.net/oauthredirectponauth://oauthredirect/

Bypass Authorization Approval

PrinterOn recommends that you disable this setting for an improved user experience.

ID Token Signing

This setting is not required.