PingFederate Notes

If SSL Settings > RequireSSL setting is enabled in IIS, ensure Accept Client Certificates option is selected. Typically, the exception "IDX10500: Signature validation failed. Unable to resolve SecurityKeyIdentifier: 'SecurityKeyIdentifier'”  will be thrown if the certificate is not passed to the client.