---
title: Configuring SSO with PingOne
description: This topic discusses steps involved in configuring single sign-on (SSO) to the PingIntelligence for APIs Dashboard from PingOne. This feature is available in PingIntelligence for APIs 4.4.1 and later versions.
component: pingintelligence
version: 5.2
page_id: pingintelligence:pingintelligence_reference_guide:pingintelligence_configure_sso_p1
canonical_url: https://docs.pingidentity.com/pingintelligence/5.2/pingintelligence_reference_guide/pingintelligence_configure_sso_p1.html
revdate: April 3, 2024
section_ids:
  before-you-begin: Before you begin
  about-this-task: About this task
  steps: Steps
  troubleshooting: Troubleshooting
---

# Configuring SSO with PingOne

This topic discusses steps involved in configuring single sign-on (SSO) to the PingIntelligence for APIs Dashboard from PingOne. This feature is available in PingIntelligence for APIs 4.4.1 and later versions.

## Before you begin

Verify the following prerequisites for SSO configuration:

* An installed PingIntelligence for APIs Dashboard.

* Access to the PingOne administration console console. For more information, see [Accessing the admin console home page](https://docs.pingidentity.com/bundle/MyPing/page/zuo1606775325800.html).

## About this task

SSO configuration for the PingIntelligence Dashboard involves configuring both the Dashboard and PingOne.

## Steps

1. Create an OIDC (OpenID Connect) web application in PingOne to set up SSO to the PingIntelligence Dashboard . To configure the OIDC application, complete the steps explained in [Configuring an OIDC application in PingOne for PingIntelligence Dashboard](pingintelligence_configure_oidc_app_p1.html).

2. Set the value of `pi.webgui.server.authentication-mode` to `sso` in `<pi_install_dir>/pingidentity/webgui/config/webgui.properties` file.

   ```
   # Authentication mode
   # valid values: native, sso
    pi.webgui.server.authentication-mode=sso
   ```

   |   |                                                                                                                                                                                                                        |
   | - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | The PingIntelligence for APIs Dashboard provides two methods for user authentication: native or SSO. SSO authentication should be used only for production deployments. Use native authentication for PoC deployments. |

3. Configure the `<pi_install_dir>/pingidentity/webgui/sso.properties` file to complete the PingIntelligence Dashboard's SSO authentication. For more information, see [Configuring Dashboard `sso.properties` for PingOne](pingintelligence_configure_dashboard_p1.html).

4. Obfuscate keys added in SSO properties using the following commands:

   ```
   # cd <pi_install_dir>/pingidentity/webgui
   # ./bin/cli.sh obfuscate_keys
   ```

5. Restart the PingIntelligence Dashboard after configuring SSO in PingOne and PingIntelligence Dashboard. For more information, see [Starting and stopping thePingIntelligenceDashboard](pingintelligence_dashboard_start_stop.html).

6. When the PingIntelligence Dashboard is started successfully, access it using` https://<pi_install_host>:8030`. The Dashboard will start SSO Authentication, and a new session will get created for the logged-in users.

## Troubleshooting

If the SSO authentication fails for any reason, the PingIntelligence Dashboard shows the following error message.

![Screenshot for PingIntelligence Dashboard SSO error](../_images/dor1616668087206.png)

|   |                                                                                                                                                                                                                                                                                                                              |
| - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | Every PingIntelligence Dashboard SSO authentication event is attached with a unique ID, which is logged in `<pi_install_dir>/pingidentity/webgui/logs/admin/sso.log`. You can filter `sso-event-ref = <unique ID>` in the `<pi_install_dir>/pingidentity/webgui/logs/admin/sso.log` file to find the reason for SSO failure. |