How can we help you?

Set up single sign-on (SSO) for ContactMonkey using PingFederate as your SAML 2.0 identity provider. ContactMonkey supports both Service Provider (SP) and Identity Provider (IdP) initiated SAML 2.0.

Before You Begin

Contact ContactMonkey Technical Support first. You'll need two pieces of information from our team before you can complete this setup:

• Application Callback URL - The URL where PingFederate sends authentication responses
• SP Entity ID - Your unique ContactMonkey organization identifier

What you'll need:

• Admin access to your PingIdentity dashboard
• The Application Callback URL from ContactMonkey support
• The SP Entity ID from ContactMonkey support

Please also review this article for requirements and frequently asked questions.

Configure PingFederate for ContactMonkey

Step 1: Create a new application

1. Log in to your PingIdentity dashboard
2. Navigate to Applications → Applications in the sidebar
3. Click the + symbol to create a new application

Step 2: Set up the application details

1. Enter an Application Name (example: "ContactMonkey")
2. Upload a logo (optional)
3. Select SAML Application as the application type
4. Click Configure

Step 3: Configure SAML settings

1. Click Manually Enter
2. In the ACS URLs field, paste your ContactMonkey Application Callback URL
3. In the Entity ID field, paste your ContactMonkey SP Entity ID
4. Click Save

Step 4: Enable the application

Toggle the application to the On position to activate it.

Step 5: Map user attributes

1. Navigate to Attribute Mappings
2. Click the edit icon
3. Add these three required attributes:
   • email → Email Address (mark as required)
   • first_name → Given Name (mark as required)
   • last_name → Family Name (mark as required)
4. Click Save

These attributes ensure ContactMonkey can identify users and populate their profile information correctly.

Step 6: Share metadata with ContactMonkey

1. Go to the Configuration tab
2. Download the metadata file
3. Send this file to ContactMonkey Technical Support through your open support ticket

Once our team receives your metadata file, they'll complete the configuration on the ContactMonkey side and confirm when SSO is active.

SSO initiation options

ContactMonkey supports two SSO initiation methods:

• Service Provider (SP) initiated - Users start at ContactMonkey's login page and are redirected to PingFederate
• Identity Provider (IdP) initiated - Users click the ContactMonkey app tile in their PingIdentity dashboard

Both methods will be enabled automatically after setup is complete.

Troubleshooting

Problem: Receiving an "Invalid ACS URL" error
Solution: Verify you copied the complete Application Callback URL from ContactMonkey support without any extra spaces or characters.

Problem: Users can't sign in after setup
Solution: Confirm the application is toggled to "On" in PingFederate and that all three user attributes (email, first_name, last_name) are marked as required.

Problem: User names aren't displaying correctly in ContactMonkey
Solution: Check that the attribute mappings exactly match the specifications in Step 5. Attribute names are case-sensitive.

See Also

• SAML SSO - Auth0 Configuration
• SAML SSO - Okta Configuration
• SAML SSO - Microsoft Entra ID (Azure AD) Configuration