---
title: Configuring an OIDC Application in PingOne for PingIntelligence Dashboard
description: Complete the following steps in PingOne, to create and configure an OIDC(Open ID Connect) application for setting up single signon (SSO) to PingIntelligence for APIs Dashboard.
component: pingintelligence
version: 5.1
page_id: pingintelligence:pingintelligence_dashboard:pingintelligence_configure_oidc_app_p1
canonical_url: https://docs.pingidentity.com/pingintelligence/5.1/pingintelligence_dashboard/pingintelligence_configure_oidc_app_p1.html
revdate: March 28, 2024
section_ids:
  steps: Steps
  next-steps: Next steps
---

# Configuring an OIDC Application in PingOne for PingIntelligence Dashboard

Complete the following steps in PingOne, to create and configure an OIDC(Open ID Connect) application for setting up single signon (SSO) to PingIntelligence for APIs Dashboard.

## Steps

1. From the PingOne dashboard, create a new connection.

   1. Go to **Connections → Applications**, and click **Add Application**.

   2. On the New Application page, select **Web App → OIDC**, and click **Configure**.

2. On the Create App Profile page, provide the information for following fields, and then click **Next**.

   * APPLICATION NAME

   * DESCRIPTION (Optional)

   * ICON (Optional)

3. On the Configure page, enter the following URL in the **Redirect URLs** field and click**Save and Continue**.

The path in the URI is as follows:` https://<pi_install_host>:8030/login/oauth2/code/PingIntelligence`. Do not change the path in the URI, just substitute the hostname. For example, `https://127.161.140.180:8030/login/oauth2/code/PingIntelligence.`

1. On the Grant Resource Access to Your Application page, to add the**profile scope** to the list of scope grants, click the associated **Plus**icon. Click **Save and Continue**.

2. On the Attribute Mapping page, add the following attributes and map them to the PingIntelligence Dashboard SSO.properties. Select the **Required** check box for each attribute. When you are finished, click**Save and Close**.

| OIDC Attributes                       | Value                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| ------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **User ID**PingOne User Attribute     | The value defaults to **sub**.                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| **Family Name**PingOne User Attribute | The value of this property should be a claim name that holds the last name of the signed-on user in `<pi_installation_path>/pingidentity/webgui/sso.properties`file. The default value for the claim is `family_name`. For more information, see [Configuring Dashboard sso.properties for PingOne](zwi1616547225190.html).                                                                                                                                                               |
| **Given Name**PingOne User Attribute  | The value of this property should be a claim name that holds the first name of the signed-on user in `<pi_installation_path>/pingidentity/webgui/sso.properties` file. The default value for the claim is` given_name`. For more information, see [Configuring Dashboard sso.properties for PingOne](zwi1616547225190.html).                                                                                                                                                              |
| **Role**Static Key                    | The value of this property should be a claim name that holds the value of the role of the signed-on user in `<pi_installation_path>/pingidentity/webgui/sso.properties` file. For more information, see [Configuring Dashboard sso.properties for PingOne](zwi1616547225190.html).[\[pingintelligence\_configure\_oidc\_app\_p1.dita\]](#pingintelligence_configure_oidc_app_p1.dita)The default value in Dashboard is` role`. Supported values for the Role claim are ADMIN and REGULAR. |

1. On the Applications page, click the![wge1616742993780](_images/wge1616742993780.png)

icon next to PingIntelligence Dashboard application. Click the **Configuration** tab and record the values for the following application properties to use in later steps in [Configuring Dashboard sso.properties for PingOne](zwi1616547225190.html):

* Issuer

* Client ID

* Client Secret

  ![PingOne Configuration screen for PingIntelligence Dashboard](../_images/kvs1616736681634.png)

  1. Click the **pencil** icon on the right and set the following properties and click **Save**.

+\[caption=] .

| Property                             | Value                                                                |
| ------------------------------------ | -------------------------------------------------------------------- |
| Response Type                        | Select **Code**.                                                     |
| Grant Type                           | Select **Authorization Code**. Keep the PKCE as **OPTIONAL**.        |
| Token Endpoint Authentication Method | Select **None**, **Client Secret Basic**, or **Client Secret Post**. |

1. To enable the application, click the toggle switch to the on (green) position.

## Next steps

Complete the SSO configuration in PingIntelligence for APIs Dashboard. For more information see, [Configuring Dashboard sso.properties for PingOne](zwi1616547225190.html).