title: How to integrate WSO2 API Manager (AM) 1.10.0 with PingFederate SAML 2.0?
body: <p>How to integrate WSO2 am 1.10.0 with PingFederate SAML 2.0? Any instructions?</p>
  
  <p>From WSO2 web site, I only saw docs on how to set up SSO among WSO2 products: <a href="https://docs.wso2.com/display/AM1100/Configuring+Single+Sign-on+with+SAML2" rel="nofollow">https://docs.wso2.com/display/AM1100/Configuring+Single+Sign-on+with+SAML2</a> .  But I did not see documentation on how to enable WSO2 AM 1.10.0 with external identity providers such as PingFederate via SAML2.</p>
  
  <p>Any help is appreciated.</p>
  
  <p>*** UPDATE:</p>
  
  <p>I followed the instructions here <a href="https://docs.wso2.com/display/AM1100/Configuring+Single+Sign-on+with+SAML2" rel="nofollow">https://docs.wso2.com/display/AM1100/Configuring+Single+Sign-on+with+SAML2</a> - just assuming WSO2 IS as PingIdentity. For the mojority part it's working, but I cannot generate keys when subscribing to an API. It says "invalid credentials" even if I have logged into applications and subscriptions and can create applications from /store UI.</p>