SSO Setup with PingOne

Learn how to add to your PingOne through your identity provider settings. Follow our step-by-step guide for a seamless setup.


Go to My Profile and then Single Sign On tab.

Add and verify company domain. For verify you should update DNS records with given TXT value

Go to PingOne admin dashboard. Section Application and add new SAML Application

Click on Import from URL and paste Entity ID from CustomGPT SSO settings page:

Then fill SAML Configuration values with settings from CustomGPT Set up SSO page (ACS URL and EntityID)

SAML Configuration values

After saving open Configuration tab, copy IDP Metadata URL and enable your new Application.

Click on Attribute Mappings and than on edit:

Add two new attributes:
email => Email address
userName => Username

You can add some custom access rules on rules tab if you need them (i.e. restrict access for SSO only for some user groups):

Return back to CustomGPT Set up SSO page, scroll down to Your SAML Configuration and paste copied IDP Metadata URL. Than click Load SAML Configuration

SSO enabled.


Enable SCIM integration in CustomGPT on SSO Settings page.

Supported provisions: create users, update user attributes, deactivate users

Go to PingOne admin dashboard

Select Identity Store.

Enter SCIM in the search box and select SCIM Outbound. Click Next. Fill name and click Next.

On Next Step:

  • Fill base URL for SCIM -
  • Leave Group Resources input field with empty value
  • Select Bearer as Authentication method, add your API token
  • Test Connection.

If everything fine click Next

Check that field on next step filled like an screenshot

Click Save and Enable your new connection:

Return back to Integrations->Provisioning and add New Rule

Fill Name and click Create Rule.

Select your connection and click Save

Edit the user filters as per your organization’s requirements. User filter decides which users will get syncing to CustomGPT app.


NOTE: PingOne doesn't support wildcards for user filters.

This is required step, without filters PingOne wouldn’t send requests via SCIM to CustomGPT.

Click on Edit icon new Attribute Mapping and

  1. change Username -> userName to Email Address -> userName
  2. add new mapping Formatted -> displayName

Than Enable your integration:


Congratulations! You have successfully enabled SSO.