---
title: Overview of the IdP SSO flow
description: With the SDG CTS Integration Kit, PingFederate allows the identity provider (IdP) to access user attributes from SDG Conversion Token Service (CTS).
component: sdg
page_id: sdg:sdg_cts_integration_kit:pf_sdg_cts_ik_overview_idp_sso_flow
canonical_url: https://docs.pingidentity.com/integrations/sdg/sdg_cts_integration_kit/pf_sdg_cts_ik_overview_idp_sso_flow.html
llms_txt: https://docs.pingidentity.com/integrations/sdg/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: October 22, 2026
section_ids:
  description: Description
---

# Overview of the IdP SSO flow

With the SDG CTS Integration Kit, PingFederate allows the identity provider (IdP) *(tooltip: \<div class="paragraph">
\<p>A service that manages identity information and provides authentication services to relying clients or SPs within a federated or distributed network.\</p>
\</div>)* to access user attributes from SDG Conversion Token Service (CTS).

The following figure illustrates an IdP-initiated single sign-on (SSO) *(tooltip: \<div class="paragraph">
\<p>The process of authenticating an identity (signing on) at one website (usually with a user ID and password) and then accessing resources secured by other domains without reauthenticating.\</p>
\</div>)* scenario where PingFederate generates an assertion using a SDG CTS IdP Adapter session cookie.

![A diagram showing an example SSO flow using the SDG CTS IdP Adapter and the CTS.](_images/pf_coreblox_ik_idp_sso_flow_overview.jpg)

## Description

1. A user initiates an SSO transaction by authenticating with the IdP.

2. The login service authenticates the user with the CTS.

3. The IdP sets a session cookie in the browser and redirects the browser to PingFederate.

4. PingFederate uses the session cookie to query the CTS for user attributes associated with the session. The CTS returns the user attributes.

5. The adapter wraps the user attributes in an assertion. PingFederate redirects the browser to the service provider with the assertion.