---
title: SDG CTS Token Translator
description: The PingFederate SDG CTS Token Translator provides a token processor and token generator for use with the PingFederate's WS-Trust Security Token Service (STS).
component: sdg
page_id: sdg:sdg_cts_token_translator:pf_sdg_cts_token_translator
canonical_url: https://docs.pingidentity.com/integrations/sdg/sdg_cts_token_translator/pf_sdg_cts_token_translator.html
llms_txt: https://docs.pingidentity.com/integrations/sdg/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: October 26, 2026
section_ids:
  components: Components
  intended-audience: Intended audience
  system-requirements: System requirements
---

# SDG CTS Token Translator

The PingFederate SDG CTS Token Translator provides a token processor and token generator for use with the PingFederate's WS-Trust Security Token Service (STS) *(tooltip: \<div class="paragraph">
\<p>An entity responsible for responding to WS-Trust requests for validation and issuance of security tokens used for SSO authentication to web services.\</p>
\</div>)*.

## Components

* Token processor

  Allows an identity provider (IdP) *(tooltip: \<div class="paragraph">
  \<p>A service that manages identity information and provides authentication services to relying clients or SPs within a federated or distributed network.\</p>
  \</div>)* STS to validate and authorize a SDG CTS session token from a web service client (WSC) *(tooltip: \<div class="paragraph">
  \<p>An entity that requests a web service interaction. In the context of a security token service (STS), the web service client would request that a security token be issued for the interaction.\</p>
  \</div>)*, and then map user attributes into a SAML token to a web service provider (WSP) *(tooltip: \<div class="paragraph">
  \<p>In the context of a security token service (STS), an entity that requests validation of the security token sent with a client's request for service.\</p>
  \</div>)*.

* Token Generator

  Allows a service provider (SP) *(tooltip: \<div class="paragraph">
  \<p>In SAML, an entity that receives and accepts an authentication assertion issued by an IdP, typically for the purpose of allowing access to a protected resource.\</p>
  \</div>)* STS to issue a SDG CTS session token for a WSP, including mapped attributes from an incoming SAML token.

## Intended audience

This document is intended for PingFederate administrators and web application developers.

If you need help during the setup process, learn more about available resources in:

* The following section of the PingFederate documentation:

  * [WS-Trust STS configuration](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_wstrust_sts_config.html)

* The following SDG CTS resources:

  * [SDG CTS Token Service](https://sdgc.com/conversion-token-service/)

## System requirements

* PingFederate 11.3 or later

* An SDG Conversion Token Service installation, either local or remote