---
title: Managing token generators
description: The PingFederate security token service (STS) uses token generators to issue security tokens that can be consumed by web services at your site. You must configure at least one generator to set up an STS connection or a token-to-token mapping.
component: pingfederate
version: 13.1
page_id: pingfederate:administrators_reference_guide:help_tokengeneratortasklet_tokenpluginmgmtstate
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/administrators_reference_guide/help_tokengeneratortasklet_tokenpluginmgmtstate.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 11, 2023
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Managing token generators

The PingFederate security token service (STS) uses token generators to issue security tokens that can be consumed by web services at your site. You must configure at least one generator to set up an STS connection or a token-to-token mapping.

## About this task

In the **Token Generators** window, create, modify, review, or remove a token generator instance.

|   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
|   | PingFederate comes bundled with the SAML 1.1 Token Generator and SAML 2.0 Token Generator.You can deploy additional token translators from [Ping Identity website](https://www.pingidentity.com/en/resources/downloads.html).For simplicity, this topic focuses on configuring an instance of the SAML 1.1 or 2.0 Token Generator. For information about add-on token generators, see [Integration overview](../introduction_to_pingfederate/pf_integr_overview.html).For more information about WS-Trust, see [Web services standards](../introduction_to_pingfederate/pf_web_service_standard.html). |

## Steps

1. Go to **Applications > Token Exchange > Token Generators**.

2. In the **Token Generators**window, choose from the following options.

   | Option                                 | Description                                                          |
   | -------------------------------------- | -------------------------------------------------------------------- |
   | Configure a new instance               | Click **Create New Instance**                                        |
   | Modify an existing instance            | Click the name of instance in the **Instance Name** column           |
   | View the usage of an existing instance | Click **Check Usage** in the **Action** column on the instance's row |
   | Remove an existing instance            | Click **Delete** in the **Action** column on the instance's row      |

   |   |                                                                                                                                                                                                                                                                                                                                                               |
   | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | By default, PingFederate automatically checks multi-connection errors whenever you access this window. This verifies that configured connections are not adversely affected by changes made here.If you experience noticeable delays in accessing this window, you can disable automatic connection validation. Go to **System > Server > General Settings**. |