---
title: Setting up IWA using PingFederate
description: Set up an application to be protected with Kerberos authentication using PingFederate's Kerberos Adapter, while PingFederate is protected by PingAccess:
component: pingaccess
version: 8.3
page_id: pingaccess:agents_and_integrations:pa_setting_up_iwa_using_pf
canonical_url: https://docs.pingidentity.com/pingaccess/8.3/agents_and_integrations/pa_setting_up_iwa_using_pf.html
revdate: March 28, 2023
section_ids:
  about-this-task: About this task
  steps: Steps
  result: Result:
---

# Setting up IWA using PingFederate

## About this task

Set up an application to be protected with Kerberos authentication using PingFederate's Kerberos Adapter, while PingFederate is protected by PingAccess:

## Steps

1. Configure your Kerberos adapter in PingFederate.

   For more information, see [Configure a Kerberos adapter instance](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_config_kerberos_adapt_instance.html) in the PingFederate documentation.

2. Add a new site in PingAccess.

   1. Go to **Applications → Sites** and click **[icon: plus, set=fa]Add Site**.

   2. In the **Name** field, enter a desired name for the site.

   3. In the **Targets** field, enter one or more hostname:port pairs for the site.

      The host and port to point to PingFederate on port `9031`.

   4. Click **Save**.

   For more information, see [Adding sites](../pingaccess_user_interface_reference_guide/pa_adding_sites.html).

3. Add a new application in PingAccess.

   1. Go to **Applications → Applications** and click **[icon: plus, set=fa]Add Application**.

   2. In the **Name** field, enter a desired name for the site.

   3. In the **Context Root** field, specify the first part of the URL path for the application and its resources.

   4. In the **Virtual Host** field, enter the host desired for the target application.

   5. In the **Destination** list, select **Site**.

   6. In the **Site** list, select the PingFederate site previously created.

   7. Configure the remaining fields as desired. Click **Save**.

   For more information, see [Adding an application](../pingaccess_user_interface_reference_guide/pa_adding_an_app.html).

4. Enable the application.

   ### Result:

   The protected application can utilize the Kerberos protocol for authentication through PingAccess, using PingFederate.