> For the complete documentation index, see [llms.txt](https://docs.2checkout.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.2checkout.com/get-started/getting-started/activate-your-account/universal-sso-with-2checkout-saml-based/ping-identity-to-2checkout-cpanel-sso-integration-setup-guide.md).
# Ping identity to 2Checkout cPanel – SSO Integration Setup Guide
This guide walks you through configuring Ping Identity as an Identity Provider (IdP) for Single Sign-On (SSO) access to your 2Checkout cPanel using SAML 2.0.
## Prerequisites
* Admin access to your Ping Identity environment
* A 2Checkout representative contact to share configuration details with
## Setup and configuration
{% stepper %}
{% step %}
### Create a new application
* Log in to the **Ping Identity Admin Console**.
* In the left-hand navigation menu, go to **Applications → Applications**.
* Click the **+** (Add) button.
* Enter an **Application Name** (e.g., 2Checkout cPanel SSO).
* Optionally, add a **Description** and upload an **Icon**.
* Under **Application Type**, select **SAML Application**.
* Click **Configure**.
{% endstep %}
{% step %}
### SAML configuration
On the **SAML Configuration** screen, select **Manually Enter**.
Fill in the following fields:
Click **Save**.
{% endstep %}
{% step %}
### Edit configuration
After saving, the application will open. Navigate to the **Configuration** tab and click **Edit**.
Set the following field:
Leave all other settings at their default values and click **Save**.
{% endstep %}
{% step %}
### Edit attribute mappings
Navigate to the **Attribute Mappings** tab and click **Edit**.
Ensure the following mapping is set:
| Attribute | PingOne Mapping |
| ------------- | --------------- |
| saml\_subject | Email Address |
Click **Save**.
{% endstep %}
{% step %}
### Enable the application
* Navigate back to **Applications → Applications**.
* Locate your newly created application in the list.
* Toggle the switch on the right side of the application row to enable it. The toggle will turn blue when active.
{% endstep %}
{% step %}
### Retrieve and share the metadata URL
* Navigate to the **Overview** tab of your application.
* Scroll down to the **Connection Details** section.
* Locate the **IDP Metadata URL** and copy it using the copy icon next to it.
* **Send this Metadata URL to your 2Checkout representative** so they can complete the IdP configuration on their end.
{% endstep %}
{% step %}
### Assign users
* Navigate to the **Access** tab of the application.
* User access is controlled through **Groups**. Click the **Groups** link to manage which groups have access to the application.
* Assign a group containing your test user first, then notify your **2Checkout representative** that a test user has been assigned and that you are ready to begin testing.
{% endstep %}
{% step %}
### Full rollout
Once testing is confirmed successful, assign the remaining users by adding the appropriate groups under the **Access** tab.
{% endstep %}
{% endstepper %}
#### Need help?
If you encounter any issues during setup, contact your 2Checkout representative for assistance.
***
*This document was generated with the assistance of AI and has been reviewed and verified by a 2Checkout team member.*\ *The information contained in this document was tested and verified using a Ping Identity trial licence. Setup steps may differ for full licence or on-premises installations.*
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.2checkout.com/get-started/getting-started/activate-your-account/universal-sso-with-2checkout-saml-based/ping-identity-to-2checkout-cpanel-sso-integration-setup-guide.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.