---
title: Creating a provisioning connection
description: To allow PingFederate to manage users in the target service, create a service provider (SP) connection.
component: scim
page_id: scim:setup:pf_scim_connector_creating_a_provisioning_connection
canonical_url: https://docs.pingidentity.com/integrations/scim/setup/pf_scim_connector_creating_a_provisioning_connection.html
revdate: July 8, 2024
section_ids:
  steps: Steps
  choose-from: Choose from:
---

# Creating a provisioning connection

To allow PingFederate to manage users in the target service, create a service provider (SP) connection.

## Steps

1. In the PingFederate administrative console, create a new SP connection:

   ### Choose from:

   * For PingFederate 10.1 or later: go to **Applications > Integration > SP Connections**. Click **Create Connection**.

   * For PingFederate 10.0 or earlier: go to **Identity Provider > SP Connections**. Click **Create Connection**.

2. Configure the basic connection details with the the target service quick connection template:

   1. On the **Connection Template** tab, select **Use a template for this connection**.

   2. In the **Connection Template** list, select **SCIM Provisioner**. Click **Next**.

   3. On the **Connection Type** tab select **Outbound Provisioning**. Click **Next**.

   4. On the **General Info** tab, in the **Connection Name** field, enter a name of your choosing. Click **Next**.

3. On the **Outbound Provisioning** tab, configure provisioning with the following details.

   Learn more in [Configuring outbound provisioning](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/help_spconnectionconfigtasklet_saasprovisioningstate.html) in the PingFederate documentation.

   1. On the **Target** screen, enter the URL and authentication details that you noted in [Gathering information from the service provider](pf_scim_connector_gathering_information_from_the_service_provider.html).

      |   |                                                                                                   |
      | - | ------------------------------------------------------------------------------------------------- |
      |   | PingFederate verifies the authentication details when you activate the channel and SP connection. |

   2. Under **Provisioning Options**, customize the provisioning connector behavior by referring to [SCIM provisioner settings reference](pf_scim_connector_scim_connector_settings_reference.html). Click **Next**.

   3. On the **Manage Channels > Attribute Mapping** tab, complete the attribute mappings by referring to [Supported attributes reference](pf_scim_connector_supported_attributes_reference.html).

      Learn more in [Managing channels](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/help_saasmanagementtasklet_saasmanagementstate.html) in the PingFederate documentation.

4. On the **Activation and Summary** tab, above the **Summary** section, click the toggle to turn on the connection. Click **Save**.
