---
title: Specifying SSO service URLs (SAML)
description: The single sign-on (SSO) service endpoint is where PingFederate sends requests when SSO is initiated at your site according to partner requirements. It applies to all SAML versions when the service provider (SP)-initiated SSO profile is enabled.
component: pingfederate
version: 13.1
page_id: pingfederate:administrators_reference_guide:pf_specifying_sso_service_urls_saml
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/administrators_reference_guide/pf_specifying_sso_service_urls_saml.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 8, 2024
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Specifying SSO service URLs (SAML)

The single sign-on (SSO) service endpoint is where PingFederate sends requests when SSO is initiated at your site according to partner requirements. It applies to all SAML versions when the service provider (SP)-initiated SSO profile is enabled.

## About this task

For SAML 2.0 connections, associate bindings to the endpoints where your identity provider (IdP) partner wants PingFederate to send authentication requests when SSO is initiated at your site.

For SAML 1.x, only one endpoint is allowed, and the binding selection is not required.

Some federation use cases might require additional customizations in the authentication requests sent from the PingFederate SP server to the IdP, such as including the optional `Extensions` element in the authentication requests. You can use OGNL expressions to fulfill these use cases.

## Steps

1. Enter an SSO service endpoint.

   1. Enter the SSO service endpoint in the **Endpoint URL** field.

      You can enter a relative path, starting with a forward slash, if you have provided a base URL on the **General Info** tab.

      For SAML 1.x connections, this is the only configurable item on the **SSO Service URL** tab.

      The remaining steps on the **SSO Service URLs** tab only apply to SAML 2.0 connections.

   2. Select a SAML binding from the list; for example, **POST**.

   3. Click **Add**.

   4. (Optional) Repeat to add additional SSO service endpoints.

2. (Optional) Customize messages using OGNL expressions.

   Expressions are not enabled by default. For more information about enabling and editing OGNL expressions, see [Attribute mapping expressions](pf_attribute_mapping_expressions.html). Additionally, message customization does not apply to SAML 1.x connection.

   1. Click **Show Advanced Customizations**.

   2. Select a message type from the list.

   3. Enter an OGNL expression to fulfill your use case.

      |   |                                                                                                                                                                                                     |
      | - | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      |   | For more information about **Message Type**, available variables, and sample OGNL expressions, see [Customizing assertions and authentication requests](pf_customiz_assert_and_auth_requests.html). |

   4. Click **Add**.

   5. (Optional) Repeat to add another message customization.