---
title: Setting up SSO to PingOne for Enterprise
description: Set up SSO to PingOne for Enterprise from PingOne.
component: pingone
page_id: pingone:getting_started_with_pingone:p1_set_up_sso_to_p14e
canonical_url: https://docs.pingidentity.com/pingone/getting_started_with_pingone/p1_set_up_sso_to_p14e.html
llms_txt: https://docs.pingidentity.com/pingone/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2025-02-10T00:00:00Z
page_aliases: ["p1_set_up_sso_to_p14e_or_pid.adoc"]
section_ids:
  adding-pingone-for-enterprise-to-an-environment: Adding PingOne for Enterprise to an environment
  steps: Steps
  configuring-sso-to-pingone-for-enterprise: Configuring SSO to PingOne for Enterprise
  before-you-begin: Before you begin
  steps-2: Steps
  result: Result:
  result-2: Result:
---

# Setting up SSO to PingOne for Enterprise

If your organization has set up PingOne for Enterprise, you can use single sign-on (SSO) *(tooltip: \<div class="paragraph">
\<p>The process of authenticating an identity (signing on) at one website (usually with a user ID and password) and then accessing resources secured by other domains without reauthenticating.\</p>
\</div>)* from the PingOne admin console to the PingOne for Enterprise tenant. This allows organizations with multiple instances of PingOne for Enterprise to keep track of each environment without having to use a unique email address for each sign-on.

You'll use SSO to PingOne for Enterprise by selecting the **Enable My Ping SSO** option on the sign-on page. Although user mapping is accomplished by an administrator signing on with an email address and password, SSO is set up using OpenID Connect (OIDC) *(tooltip: \<div class="paragraph">
\<p>An authentication protocol built on top of OAuth that authenticates users and enables clients (relying parties) of all types to request and receive information about authenticated sessions and users. OIDC is extensible, allowing clients to use optional features such as encryption of identity data, discovery of OpenID Providers (OAuth authorization servers), and session management.\</p>
\</div>)*.

## Adding PingOne for Enterprise to an environment

Add PingOne for Enterprise to your existing PingOne environment.

### Steps

1. In the PingOne admin console sidebar, click the Ping Identity logo to open the **Environments** page and browse or search for the applicable environment.

2. On the **Environments** page, click the environment to open the details panel.

3. Click **Manage Environment** and click **Overview** in the sidebar.

4. In the **Environment Capabilities** section, click the **Plus** icon ([icon: plus, set=fa]).

5. Click **[icon: plus, set=fa]Add** next to **PingOne for Enterprise** and any other products or services that you want to add to the environment.

   |   |                                                                                                                                                                                  |
   | - | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | If you don't see **PingOne for Enterprise** in the list, your organization doesn't have this service configured. Learn more in [Building solutions](p1_building_solutions.html). |

6. Click **Finish**.

## Configuring SSO to PingOne for Enterprise

### Before you begin

To set up SSO to PingOne for Enterprise, you must have the Organization Admin role assigned in PingOne. Learn more in [Administrator Roles](../directory/p1_roles.html).

### Steps

1. In the PingOne admin console, go to the **Overview** page and locate the **PingOne for Enterprise** entry in the **Optional Connections** section.

2. Click the **More Options** icon ([icon: ellipsis-vertical, set=fa]) and then click **Manage SSO**.

   ### Result:

   The PingOne for Enterprise sign-on page opens in a new tab.

   ![A screen capture showing the sign-on modal.](_images/p1-p14e-sign-on.png)

3. Enter your username and password.

4. Select the **Enable My Ping SSO** checkbox.

   |   |                                                                                 |
   | - | ------------------------------------------------------------------------------- |
   |   | This checkbox displays only if you have the Organization Admin role in PingOne. |

5. Click **Sign On**.

   ### Result:

   You see the following message:

   ![A screen capture stating that SSO has been enabled.](_images/jqf1607990660783.png)

6. Click **Okay**.

7. To remove the SSO link to your account or map to a different account, click the **Manage SSO** link.

   The **Manage SSO** link allows you to unlink your username.

8. If you have the Organization Admin role and you want to unlink the environment for all administrator users, click **Disable SSO**.

   ![A screen capture of a modal that enables the user to disable SSO.](_images/xvi1607991267209.jpg)