# PingIdentity SSO

Learn how to connect PingIdentity with Better Stack to enable single sign-on (SSO) for you and your colleagues.

### SSO setup

1.  Go to [Single Sign-On configuration](https://betterstack.com/settings/sso ";_blank").
2.  Click **Connect** on the **Generic SAML SSO** panel and select **PingIdentity**.
3.  Note the **Entity ID** and **ACS URL**. You will need them in a moment.

#### In PingIdentity

1.  Sign in to the PingIdentity console as an admin.
2.  In the left menu, go to **Applications**.
3.  Click the **+** icon to open the **Add Application** form and click **Configure**.
4.  Under **SAML Configuration**, select **Manually Enter**.
5.  For **ACS URL**, use the **ACS URL** from Better Stack.
6.  For **Entity ID**, use the **Entity ID** from Better Stack.
7.  Click **Save**.
8.  Toggle the switch in the top-right corner to enable the application.
9.  Under **Connection Details**, note the **Initiate Single Sign-On URL**. You will need this in a moment.
10. Click **Download Signing Certificate** and choose the **X509 PEM (.crt)** format. Save the file.
11. Go to the **Attribute Mappings** tab and click the **Edit** icon.
12. Add the following attribute mappings:
    *   Map `email` to `Email Address`.
    *   Map `first_name` to `Given Name`.
    *   Map `last_name` to `Family Name`.
13. Click **Save**.

#### In Better Stack

1.  For **Identity Provider Single Sign-On URL**, use the **Initiate Single Sign-On URL** from PingIdentity.
2.  Upload the certificate file you downloaded from PingIdentity.
3.  Click **Connect** to confirm the configuration. You will be redirected to PingIdentity to sign in.

That's all. Your PingIdentity Single Sign-On is now configured.