This article explains how to configure PingOne for SAML Single Sign-On (SSO) with Aircall.

Important: These instructions apply only to companies that have had SAML Single Sign-On activated by Aircall. To request activation, please contact your Account Manager. This functionality is currently available to a limited number of customers.
Note: IDP-initiated SAML sign-in is not supported. Once SAML is configured, users must log in through the Aircall Dashboard or app login page using the Sign in with SSO option.

Create a SAML application

Follow these steps to create a new SAML application in PingOne.

Steps:

  1. Log in to the Ping Identity console.
  2. In the navigation menu, expand Connections, then select Applications.
  3. On the Applications page, click the + button to create a new application.
  4. In the Add application modal:
    • Enter a name for the application (for example, acme-aircall).
    • Add a description if desired.
    • Click Add Application.
  5. Click Configure to continue setup.

Configure SAML settings

Once your application is created, configure it for SAML authentication.

Steps:

  1. In the Add application modal, for SAML Configuration, select Manually Enter.
  2. Enter the following details:
    • ACS URLs: https://sso.aircall.io/saml2/idpresponse
    • Entity ID: urn:amazon:cognito:sp:us-west-2_hZkGBmIsz
  3. Click Save.
  4. Your application (for example, acme-aircall) will now appear in the list.
  5. Enable the toggle switch next to the application name.

Set up attribute mappings

You’ll need to define attribute mappings so that PingOne can pass user information to Aircall.

Steps:

  1. Open the Attribute Mappings tab.
  2. Click Edit, then select Add under Attribute Mapping.
  3. Enter the following mapping:
    • Attributes: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
    • PingOne Mappings: Email Address
  4. Save your changes.

Configure user access

Determine which users or groups should have access to Aircall via SAML.

Steps:

  1. Go to the Access tab.
  2. Click Edit.
  3. Select the user groups that should use SAML authentication for Aircall.
  4. Save your changes.

Export metadata

You can provide Aircall with your Identity Provider (IdP) metadata by exporting the XML file or sharing the metadata URL.

Steps:

  1. Navigate to the Configuration tab.
  2. Click Download Metadata to export the XML file,
    or copy the IdP Metadata URL.

For more information on SAML setup, refer to our Customer Success team.