---
title: Add trusted sites using Internet Explorer settings
description: "Your AD Connect configuration in PingOne must have an Authentication Type value of either \"Hybrid\" or \"Integrated\". These authentication types use Integrated Windows Authentication (IWA)."
component: pingoneforenterprise
page_id: pingoneforenterprise:pingone_for_enterprise:p14e_add_trusted_sites_ie_settings
canonical_url: https://docs.pingidentity.com/pingoneforenterprise/pingone_for_enterprise/p14e_add_trusted_sites_ie_settings.html
revdate: December 9, 2021
section_ids:
  before-you-begin: Before you begin
  about-this-task: About this task
  steps: Steps
  result: Result
---

# Add trusted sites using Internet Explorer settings

## Before you begin

* Your AD Connect configuration in PingOne must have an `Authentication Type` value of either "Hybrid" or "Integrated". These authentication types use Integrated Windows Authentication (IWA).

## About this task

For seamless SSO with AD Connect, use these instructions when you want to assign the IIS host to the Internet Explorer(IE) client's list of trusted sites, and you will not be using a Group Policy for IE to do this.

## Steps

1. On the IE menu, select **Tools > Internet Options > Security > Local Intranet > Sites**.

2. Click **Advanced** and enter the full URL of the Windows Server IIS host for AD Connect (for example, https\://www\.my-adconnect-host.com). Click **Add** to add the host as a trusted site.

   |   |                                                                                                                                 |
   | - | ------------------------------------------------------------------------------------------------------------------------------- |
   |   | If you're using NLB, or another clustering solution, you will add the virtual cluster IP rather than an individual IIS host IP. |

3. Close this dialog box when you're finished and click **OK** to close the remaining open dialog boxes.

## Result

The IIS host(s) for AD Connect should now be accessible from your IE clients.