Multi-Factor Authentication (MFA/2FA) for Pingdom

Last updated on October 16, 2024

Overview

The purpose of this document is to enable Rublon Two-Factor Authentication (2FA) for users logging in to Pingdom. In order to achieve that, you have to use Rublon Access Gateway. All required steps will be described in this document.

Supported Authentication Methods

Authentication Method	Supported	Comments
Mobile Push	✔	N/A
WebAuthn/U2F Security Key	✔	N/A
Passcode	✔	N/A
SMS Passcode	✔	N/A
SMS Link	✔	N/A
Phone Call	✔	N/A
QR Code	✔	N/A
Email Link	✔	N/A
YubiKey OTP Security Key	✔	N/A

Before you start

You need to install and configure Rublon Access Gateway itself before configuring Pingdom to work with it. Please read the Rublon Access Gateway documentation and follow the steps in Installation and Configuration sections. Afterwards, follow the Configuration section in this document.

Configuration

1. Log in to Pingdom and Rublon Access Gateway. We recommend you open both in two separate tabs.

2. From the homepage of Pingdom, navigate to the left pane and go to Settings → Security.

3. Fill in the form and click Save. Refer to the following image and table.

Issuer (Entity ID)	Enter the value of Entity ID from Rublon Access Gateway (Applications → Information for configuring applications with Rublon Access Gateway).
SAML URL	Enter the value of SSO URL from Rublon Access Gateway (Applications → Information for configuring applications with Rublon Access Gateway).
Single Logout URL	Enter the value of Logout URL from Rublon Access Gateway (Applications → Information for configuring applications with Rublon Access Gateway).
Certificate	The certificate you have downloaded from Rublon Access Gateway (Applications → Information for configuring applications with Rublon Access Gateway → DOWNLOAD CERTIFICATE). Open the downloaded certificate in a text editor. Copy the entire contents and paste it into the text field.

4. Write down Solarwinds URLs (Entity ID, ACS URL, Logout URL). You are going to need these values when adding a new application to Rublon Access Gateway.

5. In Rublon Access Gateway, go to Applications → Add application.

6. Fill in the form and click SAVE to add a new application. Refer to the following image and table.

Application name	Enter a name for the application, e.g. Pingdom. The name will be displayed during Rublon 2FA.
Entity ID	Enter the Entity ID from SAML Configuration in Pingdom. This is one of the values you have written down before.
Assertion Consumer Service	Enter the ACS URL from SAML Configuration in Pingdom. This is one of the values you have written down before.
Single Logout Service	Enter the Logout URL from SAML Configuration in Pingdom. This is one of the values you have written down before.
NameID attribute	mail
Send Attributes	Select NameID.
Signature algorithm	Select sha512.
Validate AuthnRequest	Uncheck.
Sign response	Check.
Sign assertion	Check.
Certificate for signing	Select the certificate you have downloaded from Applications → Information for configuring applications with Rublon Access Gateway → DOWNLOAD CERTIFICATE.
Certificate for encryption	Select the certificate you have downloaded from Applications → Information for configuring applications with Rublon Access Gateway → DOWNLOAD CERTIFICATE.

7. In Pingdom, click the toggle in the upper right corner to enable SAML integration.

8. A popup window will appear asking you to confirm that you want to enable SAML integration. Click Enable.

9. Your configuration is complete. You can now log in to Pingdom with Rublon 2FA.

Log in to Pingdom with Rublon 2FA

1. Initiate login to Pingdom and click Log in with Single Sign On.

2. Provide your email address and click Log in with Single Sign On.

3. You will be redirected to Rublon Access Gateway login page.

4. Provide your username and password. Click SIGN IN. A window will appear with a selection of various 2FA options from Rublon. Let’s choose Mobile Push.