--- title: Adding an identity provider - Yahoo description: Add Yahoo as an external identity provider in PingOne to allow users to sign on with Yahoo when accessing your application. component: pingone page_id: pingone:integrations:p1_add_idp_yahoo_prereqs canonical_url: https://docs.pingidentity.com/pingone/integrations/p1_add_idp_yahoo_prereqs.html revdate: April 23, 2025 page_aliases: ["p1_create_app_yahoo.adoc", "p1_add_idp_yahoo.adoc", "p1_finish_app_yahoo.adoc", "p1_finish_adding_idp_yahoo.adoc"] section_ids: before-you-begin: Before you begin creating-the-application-with-yahoo: Creating the application with Yahoo steps: Steps adding-yahoo-as-an-identity-provider-in-pingone: Adding Yahoo as an identity provider in PingOne before-you-begin-2: Before you begin steps-2: Steps finishing-creating-the-application-with-yahoo: Finishing creating the application with Yahoo before-you-begin-3: Before you begin steps-3: Steps finishing-adding-the-identity-provider-in-pingone: Finishing adding the identity provider in PingOne steps-4: Steps next-steps: Next steps --- # Adding an identity provider - Yahoo Adding Yahoo as an external identity provider (IdP) *(tooltip: \
\

A service that manages identity information and provides authentication services to relying clients or SPs within a federated or distributed network.\

\
)* gives your users the option to sign on with Yahoo when accessing your application. ## Before you begin Ensure that you have: * A PingOne organization with an environment added. Learn more in [Starting a PingOne trial](../getting_started_with_pingone/p1_start_a_p1_trial.html). * Added your application to PingOne. Learn more in [Adding an application](../applications/p1_applications_add_applications.html). * A Yahoo account ## Creating the application with Yahoo To enable signing on with Yahoo, create the application on the Yahoo Developers page. Yahoo generates a client ID and client secret to identify the application. Learn more in [Getting Started](https://developer.yahoo.com/oauth2/guide/openid_connect/getting_started.html) in the OpenID Connect section of the Yahoo Developer site. ### Steps 1. Go to the [Yahoo Developer site](http://developer.yahoo.com/apps) and sign on to your account. If you haven't created a Yahoo Developer account, you can do so now. 2. Click the **Create an App** button. 3. Enter a name for the application. 4. For **Application type**, select **Web application**. 5. Leave **Redirect URI** blank for now. You will get this value from PingOne and enter it later. 6. In the **API Permissions** section, select **OpenID Connect Permissions**, and then select **Email** and **Profile**. 7. Leave the page open so you can return later to enter the **Redirect URI**. ## Adding Yahoo as an identity provider in PingOne Configure the IdP connection in PingOne. ### Before you begin Ensure that registration is enabled in the authentication policy. Learn more in [Editing an authentication policy](../authentication/p1_edit_auth_policy.html). ### Steps 1. In the PingOne admin console, go to **Integrations > External IdPs** and click **[icon: plus, set=fa]**. 2. Click **Yahoo**. 3. Click **Next**. 4. On the **Add External Identity Provider** page, enter the following information: * **Name**: A unique identifier for the IdP. * **Description** (optional): A brief description of the IdP. * **Population**: A population that overrides the authentication policy's registration population and enables just-in-time registration from the IdP. | | | | - | ------------------------------------------------------------------------------------------------------- | | | You can't change the **Icon** and **Sign-on Button** in accordance with the provider's brand standards. | 5. Click **Next**. 6. Copy the value for **Callback URL** to a secure location. 7. Leave the page open so you can return later to enter the values for **Client ID** and **Client secret**. ## Finishing creating the application with Yahoo Add the callback URL from the PingOne admin console to your Yahoo application. ### Before you begin Ensure you have the callback URL from the PingOne admin console that you copied in [Adding an identity provider - Yahoo](p1_add_idp_yahoo_prereqs.html). ### Steps 1. Go to the [Yahoo Developers page](http://developer.yahoo.com/apps). 2. For **Callback URL**, enter the value that you copied from the PingOne admin console on the **Configure Connection** page. 3. Click **Create App**. ## Finishing adding the identity provider in PingOne After you have created the application with Yahoo, copy the values for client ID and client secret and enter them into PingOne. ### Steps 1. Go to the [Yahoo Developers page](http://developer.yahoo.com/apps). 2. Copy the values for **Client ID** and **Client Secret** to a secure location. 3. In the PingOne admin console, finish configuring the Yahoo connection and enter the following information: * **Client ID**: The application ID that you copied from the IdP. You can find this information on the Yahoo Developers site. * **Client Secret**: The application secret that you copied from the IdP. You can find this information on the Yahoo Developers site. * **Callback URL**: The URL to which the user will be redirected after authenticating. 4. Click **Next**. 5. Define how the PingOne user attributes are mapped to IdP attributes. Learn more in [Mapping attributes](../directory/p1_editsamlattributemapping.html). * Enter the PingOne user profile attribute and the external IdP attribute. Learn more about attribute syntax in [Identity provider attributes](p1_idp_attributes.html). * To add an attribute, click **[icon: plus, set=fa]Add**. * To use the advanced expression builder, click the **Gear** icon. Learn more in [Using the expression builder](../pingone_expression_language/p1_use_expression_builder.html). * Select the update condition, which determines how PingOne updates its user directory with the values from the IdP. The options are: * **Empty only**: Update the PingOne attribute only if the existing attribute is empty. * **Always**: Always update the PingOne directory attribute. You can map the following attributes provided by Yahoo: * `sub` * `name` * `given_name` * `family_name` * `email` * `picture` * `nickname` * `locale` 6. Click **Save**. 7. To enable the IdP, click the toggle at the top of the details panel to the right (blue). | | | | - | ------------------------------------------------------------------ | | | You can disable the IdP by clicking the toggle to the left (gray). | ### Next steps * [Add the IdP to your authentication policy](../authentication/p1_edit_auth_policy.html). * [Apply the authentication policy to your application](../applications/p1_apply_auth_policy_to_applications.html).