---
title: Configure IdP Browser SSO
description: Browser-based single sign-on (SSO), also known as Browser SSO, relies on a user's web browser and HTTP requests to broker identity-federation messaging in XML or JSON web token (JWT) between an identity provider (IdP) and a service provider (SP).
component: pingfederate
version: 13.1
page_id: pingfederate:administrators_reference_guide:help_spconnectionconfigtasklet_spbrowserssostate
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/administrators_reference_guide/help_spconnectionconfigtasklet_spbrowserssostate.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 5, 2022
section_ids:
  saml-2-0-configuration-steps: SAML 2.0 configuration steps
  saml-1-x-configuration-steps: SAML 1.x configuration steps
  ws-federation-configuration-steps: WS-Federation configuration steps
---

# Configure IdP Browser SSO

Browser-based single sign-on (SSO), also known as Browser SSO, relies on a user's web browser and HTTP requests to broker identity-federation messaging in XML or JSON web token (JWT) between an identity provider (IdP) and a service provider (SP).

Go to **Applications > Integration > SP Connections** to access an existing or create a new SP connection. For more information, see [Accessing SP connections](help_spconnectionstasklet_connmgmtstate.html).

From the **Browser SSO** tab inside your SP connection instance, click **Configure Browser SSO** and follow the steps below based on your federation protocol.

|   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | Many steps involved in setting up a federation connection are protocol-independent. They are required steps for all connections, regardless of the associated standards. For more information, see [Federation roles](../introduction_to_pingfederate/pf_fed_roles.html).Some steps are required under the applicable protocol, while others are optional. Still others are required only based on certain selections. The administrative console determines the required and optional steps based on the protocol and dynamically presents additional requirements or options based on selections.The following sections provide sequential information about every step you might encounter while configuring browser-based SSO, depending on the protocol you are using for a particular connection. |

## SAML 2.0 configuration steps

* [Choosing SAML 2.0 profiles](help_spbrowserssotasklet_selectsamlprofilesstate.html)

* [Setting an SSO token lifetime](help_spbrowserssotasklet_configassertionlifetimestate.html)

* [Configuring SSO token creation](help_spbrowserssotasklet_assertioncreationstate.html)

  * [Choosing an identity mapping method for IdP SSO](help_assertioncreationtasklet_selectspaccountlinkingstate.html)

  * [Setting up an attribute contract](help_assertioncreationtasklet_createattributecontractstate.html)

  * [Managing authentication source mappings](help_assertioncreationtasklet_idpadaptermappingstate.html)

* [Configuring protocol settings](help_spbrowserssotasklet_spprotocolsettingsstate.html)

  * [Setting Assertion Consumer Service URLs (SAML)](help_spprotocolsettingstasklet_assertionconsumerservicestate.html)

  * [Specifying SLO service URLs (SAML 2.0)](help_spprotocolsettingstasklet_sloserviceurlconfigstate.html)

  * [Choosing allowable SAML bindings (SAML 2.0)](help_spprotocolsettingstasklet_allowablesamlbindingsstate.html)

  * [Setting an artifact lifetime (SAML)](help_spprotocolsettingstasklet_configartifactlifetimestate.html)

  * [Specifying artifact resolver locations (SAML 2.0)](help_spprotocolsettingstasklet_artifactconfigstate.html)

  * [Defining signature policy (SAML)](help_spprotocolsettingstasklet_spsignaturepolicystate.html)

  * [Configuring XML encryption policy (SAML 2.0)](help_spprotocolsettingstasklet_selectspxmlassertionencryptionstate.html)

## SAML 1.x configuration steps

* [Setting an SSO token lifetime](help_spbrowserssotasklet_configassertionlifetimestate.html)

* [Configuring SSO token creation](help_spbrowserssotasklet_assertioncreationstate.html)

  * [Choosing an identity mapping method for IdP SSO](help_assertioncreationtasklet_selectspaccountlinkingstate.html)

  * [Setting up an attribute contract](help_assertioncreationtasklet_createattributecontractstate.html)

  * [Managing authentication source mappings](help_assertioncreationtasklet_idpadaptermappingstate.html)

* [Configuring protocol settings](help_spbrowserssotasklet_spprotocolsettingsstate.html)

  * [Setting Assertion Consumer Service URLs (SAML)](help_spprotocolsettingstasklet_assertionconsumerservicestate.html)

  * [Setting a default target URL (SAML 1.x)](help_spprotocolsettingstasklet_defaulttargeturlstate.html)

  * [Setting an artifact lifetime (SAML)](help_spprotocolsettingstasklet_configartifactlifetimestate.html)

  * [Defining signature policy (SAML)](help_spprotocolsettingstasklet_spsignaturepolicystate.html)

## WS-Federation configuration steps

* [Setting an SSO token lifetime](help_spbrowserssotasklet_configassertionlifetimestate.html)

* [Configuring SSO token creation](help_spbrowserssotasklet_assertioncreationstate.html)

  * [Choosing an identity mapping method for IdP SSO](help_assertioncreationtasklet_selectspaccountlinkingstate.html)

  * [Setting up an attribute contract](help_assertioncreationtasklet_createattributecontractstate.html)

  * [Managing authentication source mappings](help_assertioncreationtasklet_idpadaptermappingstate.html)

* [Configuring protocol settings](help_spbrowserssotasklet_spprotocolsettingsstate.html)

  * [Defining a service URL (WS-Federation)](help_spprotocolsettingstasklet_wsfedserviceurlstate.html)

After configuring SSO settings, you will normally need to configure authentication credentials, the range of which depends on your SSO selection. For more information, see [Configuring credentials](help_spconnectionconfigtasklet_credentialsstate.html). You might need to complete further configuration tasks for new or modified connections, depending on the selected options on the **Connection Options** tab.