---
title: Implementing IdP functionality
description: The NetWeaver IdP Adapter uses the SAP SSO extension library to decrypt the session ticket and pass the attributes to the PingFederate server, which maps the values into an assertion and sends the assertion to the SP's federation gateway. For more information about configuration setup and attribute mapping, see Configuring an IdP adapter instance and User attributes in the PingFederate documentation.
component: sap-netweaver
page_id: sap-netweaver:setup:pf_sap_netweaver_ik_implementing_idp_functionality
canonical_url: https://docs.pingidentity.com/integrations/sap-netweaver/setup/pf_sap_netweaver_ik_implementing_idp_functionality.html
revdate: June 25, 2024
---

# Implementing IdP functionality

The NetWeaver IdP Adapter uses the SAP SSO extension library to decrypt the session ticket and pass the attributes to the PingFederate server, which maps the values into an assertion and sends the assertion to the SP's federation gateway. For more information about configuration setup and attribute mapping, see [Configuring an IdP adapter instance](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_configuring_idp_adapter_instance.html) and [User attributes](https://docs.pingidentity.com/pingfederate/latest/introduction_to_pingfederate/pf_user_attrib.html) in the PingFederate documentation.

The following figure illustrates the request flow and how the NetWeaver IdP Adapter is used in generating a SAML assertion:

![psr1563995640073](_images/psr1563995640073.jpg)

**Processing Steps**

1. The user's browser accesses the IdP application.

2. The SAP J2EE Server authenticates the user and creates a session ticket.

3. The user clicks a link that initiates a Single Sign-on (SSO) transaction to the partner application. The request is redirected to the PingFederate IdP Server.

4. The NetWeaver IdP Adapter retrieves the session ticket from the session cookie, decrypts the session ticket, and then transfers the attributes to the PingFederate IdP Server.

5. The PingFederate IdP server generates a SAML assertion and redirects the request, with the assertion, back through the user's browser to the SP site.