Ping to Okta - Identity Provider Change

Executive Summary

What is changing?

Cisco is changing Identity Providers (IDP) from PingFederate to Okta. Smart Bonding connections need to be adjusted to switch IDP providers for authentication.

What do Smart Bonding users need to do?

Smart Bonding connections need to update a few parameters for authentication and APIs. New credentials will be provided during the change phase by a Smart Bonding engineer.

Parameters that need to be adjusted:

• URL for Authentication
• Credentials (Client ID / Client Secret) for authentication
• Header information for authentication
• URLs for Smart Bonding APIs

When does this change happen?

The change will be completed by March 31, 2024. Smart Bonding project managers are scheduling times with each user.

How can this change be tested?

Smart Bonding offers a postman collection that can be used for self testing with two options of sending the client ID and client secret to Cisco to obtain a token.

Postman Collection

Technical Details

Authentication Header:

The authentication request header needs to be formatted as such:

CopyContent-Type : application/x-www-form-urlencoded

Authentication URL:

Authentication Option 1 - credentials in request body

Use your new client_id and client_secret in the message body

CopyBody: {"grant_type":"client_credentials", "client_id":"", "client_secret":""}

Authentication Option 2 - credentials as parameters

Use the client_id and client_secret as parameters in the message header / URL

URL Changes:

The table below shows URLs need to be changed, based on what URL is currently implemented for connections.

CURL Test

If a curl test is required, then the following command is correct to request a token:

Copycurl -d "grant_type=client_credentials" -X POST "https://id.cisco.com/oauth2/default/v1/token?grant_type=client_credentials&client_id=<client_id>&client_secret=<client_secret>"

ServiceNow App Users

Companies using the ServiceNow App for Smart Bonding will only need to change one system property and then update the authentication credentials provided by the Smart Bonding engineer.

System Parameter

On the Cisco Task Properties page in your ServiceNow system, change the first property (Cisco Identity Provider) from "Ping" to "Okta".

Update the Cisco-provided username and password under the Stage and Production Integration Properties sections with the credentials provided by the Smart Bonding engineer.

Testing with Cisco

In conjunction with the changes detailed above, Smart Bonding must also make a change on the Smart Bonding platform for the changes to take effect. Testing the connection from your ticketing system will not be successful until both parties have made the required changes. The Smart Bonding team will coordinate live testing sessions for each connection to verify the changes.