---
title: Setting up SSO to PingOne for Enterprise
description: Set up SSO to PingOne for Enterprise from PingOne.
component: pingone
page_id: pingone:getting_started_with_pingone:p1_set_up_sso_to_p14e
canonical_url: https://docs.pingidentity.com/pingone/getting_started_with_pingone/p1_set_up_sso_to_p14e.html
revdate: February 10, 2025
page_aliases: ["p1_set_up_sso_to_p14e_or_pid.adoc"]
section_ids:
  before-you-begin: Before you begin
  steps: Steps
  result: Result:
  result-2: Result:
---

# Setting up SSO to PingOne for Enterprise

If your organization has set up PingOne for Enterprise, you can use single sign-on (SSO) *(tooltip: \<div class="paragraph">
\<p>The process of authenticating an identity (signing on) at one website (usually with a user ID and password) and then accessing resources secured by other domains without reauthenticating.\</p>
\</div>)* from the PingOne admin console to the PingOne for Enterprise tenant. This allows organizations with multiple instances of PingOne for Enterprise to keep track of each environment without having to use a unique email address for each sign-on.

You'll use SSO to PingOne for Enterprise by selecting the **Enable SSO** option on the sign-on page. Although user mapping is accomplished by an administrator signing on with an email address and password, SSO is set up using OpenID Connect (OIDC) *(tooltip: \<div class="paragraph">
\<p>An authentication protocol built on top of OAuth that authenticates users and enables clients (relying parties) of all types to request and receive information about authenticated sessions and users. OIDC is extensible, allowing clients to use optional features such as encryption of identity data, discovery of OpenID Providers (OAuth authorization servers), and session management.\</p>
\</div>)*.

## Before you begin

To set up SSO to PingOne for Enterprise, you must have the Organization Admin role assigned in PingOne. Learn more in [Administrator Roles](../directory/p1_roles.html).

## Steps

1. In the PingOne admin console, go to the **Overview** page.

2. In the **Services** section, click the **PingOne for Enterprise** icon.

   |   |                                                                                                                                                                                |
   | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
   |   | If you don't see the **PingOne for Enterprise** icon, your organization doesn't have this services configured. Learn more in [Building solutions](p1_building_solutions.html). |

   ### Result:

   The **Sign On** modal opens.

   ![A screen capture showing the sign-on modal.](_images/etv1607990387189.jpg)

3. Enter your username and password.

4. Select the **Enable SSO from My Ping** checkbox.

   |   |                                                                     |
   | - | ------------------------------------------------------------------- |
   |   | This checkbox displays only if you have an Organization Admin role. |

5. Click **Sign On**.

   ### Result:

   You see the following message:

   ![A screen capture stating that SSO has been enabled.](_images/jqf1607990660783.jpg)

6. Click **Continue**.

7. To remove the SSO link to your account or map to a different account, click the **Manage SSO** link.

   The **Manage SSO** link allows you to unlink your username.

8. If you have the Organization Admin role and you want to unlink the environment for all administrator users, click **Disable SSO**.

   ![A screen capture of a modal that enables the user to disable SSO.](_images/xvi1607991267209.jpg)