Ping identity to 2Checkout cPanel – SSO Integration Setup Guide

This guide walks you through configuring Ping Identity as an Identity Provider (IdP) for Single Sign-On (SSO) access to your 2Checkout cPanel using SAML 2.0.

Prerequisites

• Admin access to your Ping Identity environment
• A 2Checkout representative contact to share configuration details with

Setup and configuration

1

Create a new application

• Log in to the Ping Identity Admin Console.
• In the left-hand navigation menu, go to Applications → Applications.
• Click the + (Add) button.
• Enter an Application Name (e.g., 2Checkout cPanel SSO).
• Optionally, add a Description and upload an Icon.
• Under Application Type, select SAML Application.
• Click Configure.

2

SAML configuration

On the SAML Configuration screen, select Manually Enter.

Fill in the following fields:

Field	Value
ACS URLs	https://secure.2checkout.com/cpanel/saml-login
Entity ID	https://secure.2checkout.com/cpanel/saml-login

Click Save.

3

Edit configuration

After saving, the application will open. Navigate to the Configuration tab and click Edit.

Set the following field:

Field	Value
Target Application URL	https://secure.2checkout.com/cpanel/saml-login

Leave all other settings at their default values and click Save.

4

Edit attribute mappings

Navigate to the Attribute Mappings tab and click Edit.

Ensure the following mapping is set:

Attribute	PingOne Mapping
saml_subject	Email Address

Click Save.

5

Enable the application

• Navigate back to Applications → Applications.
• Locate your newly created application in the list.
• Toggle the switch on the right side of the application row to enable it. The toggle will turn blue when active.

6

Retrieve and share the metadata URL

• Navigate to the Overview tab of your application.
• Scroll down to the Connection Details section.
• Locate the IDP Metadata URL and copy it using the copy icon next to it.
• Send this Metadata URL to your 2Checkout representative so they can complete the IdP configuration on their end.

7

Assign users

• Navigate to the Access tab of the application.
• User access is controlled through Groups. Click the Groups link to manage which groups have access to the application.
• Assign a group containing your test user first, then notify your 2Checkout representative that a test user has been assigned and that you are ready to begin testing.

8

Full rollout

Once testing is confirmed successful, assign the remaining users by adding the appropriate groups under the Access tab.

Need help?

If you encounter any issues during setup, contact your 2Checkout representative for assistance.

---

_{This document was generated with the assistance of AI and has been reviewed and verified by a 2Checkout team member. The information contained in this document was tested and verified using a Ping Identity trial licence. Setup steps may differ for full licence or on-premises installations.}