---
title: Configuring an authoritative identity provider
description: Configure an identity provider (IdP) in PingOne as an authoritative IdP, which allows it to provision users without any registration or sign-on steps.
component: pingone
page_id: pingone:integrations:p1_configure_authoritative_idp
canonical_url: https://docs.pingidentity.com/pingone/integrations/p1_configure_authoritative_idp.html
revdate: April 24, 2025
section_ids:
  about-this-task: About this task
  before-you-begin: Before you begin
  steps: Steps
---

# Configuring an authoritative identity provider

You can configure an identity provider (IdP) *(tooltip: \<div class="paragraph">
\<p>A service that manages identity information and provides authentication services to relying clients or SPs within a federated or distributed network.\</p>
\</div>)* as an authoritative IdP, which allows it to provision users without any registration or sign-on steps.

## About this task

Set up an IdP as usual, edit the IdP to configure it as an authoritative IdP, and then specify which population should contain the provisioned users.

## Before you begin

Set up an external IdP if you haven't already. Learn more in [External IdPs](p1_external_idps.html).

## Steps

1. In the PingOne admin console, go to **Integrations > External IdPs** and browse or search for the IdP that you want to edit.

2. Click the IdP entry to open the details panel.

3. On the **Profile** tab, click the **Pencil** icon.

4. In the **Population** list, select the population to which you want to provision users.

   Selecting a population enables just-in-time (JIT) provisioning for the configured IdP and overrides the population set in the authentication policy under **Enable registration**.

5. Click **Save**.
