---
title: Bridging an IdP to multiple SPs
description: PingFederate bridges single sign-on (SSO) and single log-out (SLO) transactions between an identity provider (IdP) and multiple service providers (SPs).
component: pingfederate
version: 13.1
page_id: pingfederate:introduction_to_pingfederate:pf_bridg_idp_to_multipl_sp
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/introduction_to_pingfederate/pf_bridg_idp_to_multipl_sp.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 5, 2022
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Bridging an IdP to multiple SPs

PingFederate bridges single sign-on (SSO) and single log-out (SLO) transactions between an identity provider (IdP) and multiple service providers (SPs).

## About this task

For example, your company wants to route federation requests from a recently acquired subsidiary through its federation infrastructure. PingFederate multiplexes one IdP connection to multiple SP connections to the desired SPs. The federation hub consumes assertions from the subsidiary and creates new assertions to the respective SPs.

![diagram depicting the Federation hub with an IdP bridged to multiple SPs.](_images/aum1564003196667.png)

## Steps

1. For each SP, create a contract to the IdP. For more information, see [Federation hub and authentication policy contracts](pf_fed_hub_auth_polic_contract.html). Because each SP likely requires a unique set of attributes, you will need to create multiple contracts.

2. Create an IdP connection between the IdP and PingFederate, the federation hub as the SP.

3. Add the applicable authentication policy contract(s) to the IdP connection on the **Target Session Mapping** window.

4. For each SP, create an SP connection between PingFederate, the federation hub as the IdP, and the SP.

5. Add the corresponding authentication policy contract to the SP connection on the **Authentication Source Mapping** window.

6. For each SP supporting the SAML IdP-initiated SSO profile, map the expected target resources to the corresponding SP connections on the **Applications > Integration > Target URL Mapping** window.

7. Work with the IdP to connect to PingFederate , the federation hub as the SP.

8. Work with each SP to connect to PingFederate, the federation hub as the IdP.