Introduction:
PING ID is a popular authentication solution that provides secure access to applications and services. In this blog post, we will explore how to integrate PING ID authentication with Apex and Visualforce in Salesforce. We will guide you through the process of setting up PING ID, creating an Apex controller, and building a Visualforce page to implement the authentication flow.
Step 1: Set Up PING ID:
1. Obtain PING ID credentials:
- Sign up for a PING ID account and obtain the necessary API credentials (client ID, client secret, and base URL) for your Salesforce integration.
2. Configure PING ID in Salesforce:
- Go to the Salesforce Setup.
- Navigate to "Connected App" and create a new connected app.
- Enter the PING ID client ID and client secret.
- Set the callback URL to the Visualforce page URL that you will create in the next step.
- Configure the required OAuth scopes and other settings as per your requirements.
Step 2: Implement Apex Controller:
Create an Apex controller that handles the authentication flow and communicates with the PING ID API. Here's an example of an Apex controller:
public class PINGIDController {
private String clientId = '<YOUR_CLIENT_ID>';
private String clientSecret = '<YOUR_CLIENT_SECRET>';
private String baseURL = '<YOUR_BASE_URL>';
public PageReference authenticate() {
String authorizationUrl = baseURL + '/as/authorization.oauth2?' +
'response_type=code' +
'&client_id=' + clientId +
'&redirect_uri=' + EncodingUtil.urlEncode(getRedirectURL(), 'UTF-8');
return new PageReference(authorizationUrl);
}
public PageReference handleCallback() {
String code = ApexPages.currentPage().getParameters().get('code');
String tokenURL = baseURL + '/as/token.oauth2';
HttpRequest request = new HttpRequest();
request.setEndpoint(tokenURL);
request.setMethod('POST');
request.setHeader('Content-Type', 'application/x-www-form-urlencoded');
String requestBody = 'grant_type=authorization_code' +
'&code=' + EncodingUtil.urlEncode(code, 'UTF-8') +
'&client_id=' + clientId +
'&client_secret=' + clientSecret +
'&redirect_uri=' + EncodingUtil.urlEncode(getRedirectURL(), 'UTF-8');
request.setBody(requestBody);
Http http = new Http();
HttpResponse response = http.send(request);
if (response.getStatusCode() == 200) {
// Authentication successful, process the response and redirect to the desired page
// ...
} else {
// Authentication failed, handle the error
// ...
}
}
private String getRedirectURL() {
return URL.getSalesforceBaseUrl().toExternalForm() + '/apex/PINGIDCallback';
}
}
Step 3: Create Visualforce Page:
Create a Visualforce page that serves as the entry point for the authentication flow and invokes the Apex controller methods. Here's an example of a Visualforce page:
<apex:page controller="PINGIDController">
<apex:form>
<apex:commandButton value="Authenticate with PING ID" action="{!authenticate}" />
</apex:form>
</apex:page>
Step 4: Create Callback Visualforce Page:
Create another Visualforce page as the callback URL specified in the PING ID connected app. This page invokes the `handleCallback` method in the Apex controller. Here's an example of a Visualforce page for the callback:
<apex:page controller="PINGIDController" action="{!handleCallback}" />
Step 5: Test the PING ID Authentication Flow:
1. Add the Visualforce page that initiates the authentication flow to your Salesforce org's navigation menu or access it directly via the URL.
2. When the user clicks the "Authenticate with PING ID" button, they will be redirected to the PING ID login page.
3. After successful authentication, the user will be redirected back to the callback Visualforce page, and the 'handleCallback' method in the Apex controller will process the authentication response.
4. Based on the response, you can perform further actions, such as redirecting the user to a specific page or displaying an error message.
Conclusion:
By following the steps outlined in this blog post, you can integrate PING ID authentication with Apex and Visualforce in Salesforce. This allows you to leverage the security and capabilities provided by PING ID to authenticate users accessing your Salesforce application. Customize the Apex controller and Visualforce pages as per your specific requirements to create a seamless and secure authentication experience for your users.
Please note that the provided code and instructions are a starting point, and you may need to adapt them based on your PING ID configuration and desired authentication flow. Always refer to the PING ID documentation and best practices for more detailed information.
Happy integrating PING ID authentication in Salesforce!