---
title: Create an SP connection
description: On the Connection Type screen, select the Browser SSO Profiles check box and select WS-Federation as the Protocol. If you are configuring the connection for active federation (for native client cases such as the Dynamics CRM plug-in for Outlook), select the WS-Trust STS check box. You must select SAML 1.1 as the Default Token Type.
component: dynamicscrm
page_id: dynamicscrm:pingfederate_configuration:pf_dynamicscrm_integration_create_an_sp_connection
canonical_url: https://docs.pingidentity.com/integrations/dynamicscrm/pingfederate_configuration/pf_dynamicscrm_integration_create_an_sp_connection.html
revdate: July 3, 2024
section_ids:
  steps: Steps
---

# Create an SP connection

## Steps

1. On the **Connection Type** screen, select the **Browser SSO Profiles** check box and select **WS-Federation** as the Protocol. If you are configuring the connection for active federation (for native client cases such as the Dynamics CRM plug-in for Outlook), select the **WS-Trust STS** check box. You must select **SAML 1.1** as the Default Token Type.

2. On the **General Info** screen, enter the CRM Web site in the **Partner's Realm** field.

   For example, `https://ping.crm.com/default.aspx`

3. Enter a value in the **Connection Name** field.

4. On the **Browser SSO** screen, click **Configure Browser SSO**.

5. On the **Assertion Lifetime** screen, update the lifetime of the assertion as needed. Note that Dynamics CRM uses the SAML token to determine the session lifetime; you may increase the **Minutes After** value to extend the CRM session lifetime beyond 5 minutes (the default value).

6. On the **Assertion Creation** screen, click **Configure Assertion Creation**.

7. On the **Identity Mapping** screen, select **User Principal Name**.

8. On the **Attribute Contract** screen, extend the contract by adding `upn` and selecting **http\://schemas.xmlsoap.org/ws/2005/05/identity/claims** as the attribute name format.