Integrate Pinpoint with Zero Trust Network Access

In this topic, you will find general instructions on how to integrate Pinpoint with Portnox™ Zero Trust Network Access.

Create a Portnox Cloud application configuration

In this step, you will create a configuration in Portnox Cloud that will contain all the information necessary to integrate with Pinpoint.

  1. In a new tab of your browser, open your Portnox Cloud account by accessing the following URL: https://clear.portnox.com/

    From now on, we will call this tab the Portnox tab.

  2. In the Cloud portal top menu, click on the Zero Trust Resources option.

  3. On the Resources screen, click on the Create resource button.

    1. In the What type of resource is this? section, select the SSO web application option.
    2. In the Authentication protocol section, select the SAML option.
    3. Click on the Next button.

  4. Optional: If you have more than one SAML identity provider configured, select the identity provider in the Select an identity provider to use for this resource section.
  5. In the Resource details section, enter a Resource name and optionally a Description.

    In this example, we used the name Pinpoint for the new application configuration but you can use any name you like.

  6. Keep this browser tab open. You will need it later.

Open your Pinpoint single sign-on settings

In this section, you will access your Pinpoint company settings and add a SAML integration.

  1. In another tab of your browser, open your Pinpoint dashboard by accessing the following URL: https://your_tenant.pinpointhq.com/login/, substituting your_tenant with your Pinpoint tenant name.

    From now on, we will call this tab the Pinpoint tab.

  2. In the left-hand side menu, scroll all the way down to the Settings section, and click on the Integrations option.

  3. In the Integrations pane, in the Apps tab, type saml in the Search field to limit the results. Then, click on the ADD button in the SAML tile.

  4. In the IDENTITY PROVIDER NAME field, enter the name to be displayed on the Pinpoint login screen (if more than one login option is available).

    This name will be displayed on the login screen as Log in with identity_provider_name.

    In this example, we used the name Portnox Conditional Access but you can use any name you like, for example, your company name.

Copy configuration values from the Pinpoint tab to the Portnox tab

In this section, you will copy the values displayed in your Pinpoint SSO setup section, and paste them in the relevant fields in Portnox Cloud.

  1. In the Pinpoint tab, click on the ⧉ COPY icon next to the ENTITY ID field to copy the value to the clipboard.

  2. In the Portnox tab, in the Resource properties section, click on the empty field under the Entity ID / Service Provider Entity URL heading and paste the value copied from Pinpoint.

  3. In the Pinpoint tab, click on the ⧉ COPY icon next to the CONSUMER URL field to copy the value to the clipboard.

  4. In the Portnox tab, in the Resource properties section, click on the empty field under the Assertion Consumer Service (ACS) URL / Reply URL heading and paste the value copied from Pinpoint.

  5. In the Pinpoint tab, click on the ⧉ COPY icon next to the LOGIN URL field to copy the value to the clipboard.

  6. In the Portnox tab, in the Resource properties section, click on the OPTIONAL SETTINGS link to show optional settings, and then click on the empty field under the Application Login URI (Optional) heading and paste the value copied from Pinpoint.

  7. In the Portnox tab, in the OPTIONAL SETTINGS section, click on the empty field under the Allowed Logout URIs (Optional) heading and paste the same value that you pasted in the Assertion Consumer Service (ACS) URL / Reply URL field.

Copy configuration values from the Portnox tab to the Pinpoint tab

In this section, you will download the metadata file from Portnox Cloud and paste its content in the relevant field in the Pinpoint SAML setup section.

  1. In the Portnox tab, in the SAML metadata section, click on the Download metadata XML file link to download the XML file and save it to your local drive.

  2. Open the downloaded file in your browser or in a text editor. Select the entire content of the file and copy it to your clipboard.

  3. In the Pinpoint tab, click on the METADATA XML field and paste the content of the XML file that you just copied from your browser or text editor.

Finalize the configuration

In this section, you will finalize the configuration in Portnox Cloud and Pinpoint.

  1. Finalize the configuration in the Portnox tab.
    1. Optional: Click on the Next button, and in the Policy enforcement section, in the Device risk assessment section, change the setting to Override with custom policy and then select a risk assessment policy if you want to assess risk with this application using a custom risk assessment policy, and in the Access control section, change the setting to Override with custom policy and then select an access control policy if you want to control access to this application using a custom access control policy.
    2. Scroll all the way down to the end of the page, and then click on the Add resource button.

  2. Finalize the configuration in the Pinpoint tab.
    1. Click on the ADVANCED CONFIGURATION link on the bottom of the pane to show advanced configuration options.

    2. Make sure that among the signing options, only the Assertions signed option is turned on.

    3. Click on the Save button.

    4. Optional: After testing the configuration and confirming that users can log on using Zero Trust Network Access, you can turn on the following options: Enforce login and Automatically redirect login.

Result: You have configured Pinpoint to be accessible using Portnox Zero Trust Network Access.