# Ping Identity setup

> Learn how to set up Ping Identity as an identity provider for Sketch with the help of our step-by-step guides.

**URL:** https://www.sketch.com/docs/getting-started/single-sign-on/setting-up-saml-sso/setup-identity-provider/ping-identity-setup/ | **Last updated:** 2026-04-01

---
### Create a Workforce environment

1. Click the **Ping Identity logo** in the top-left corner to go to the Environments page.

![An image showing the Environments page in PingOne](https://cdn.sketch.com/docs/sso/1-ping-identity-create-environment.png)

1. Click **+ Create Environment**.
1. Select **Workforce** as the solution type.
1. Choose an environment type. Select **Sandbox** for testing, or **Production** for your live environment.
1. Name your environment, select your region and click **Next** to create it.

![An image showing the Create Environment wizard in PingOne](https://cdn.sketch.com/docs/sso/2-ping-identity-create-environment-wizard.png)

1. Open the new environment. In the left sidebar, confirm **Applications** and **Integrations > Provisioning** appear in the sidebar.

### Create a SAML application in PingOne

1. Make sure you’re in your **Workforce environment** — check the breadcrumb at the top of the page.
1. Go to **Applications > Applications** in the left sidebar.
1. Click the **+** button to add a new application.
1. Enter an **Application Name** — for example, `Sketch Enterprise` — and an optional description.
1. Select **SAML Application** as the application type.
1. Click **Configure**.

![An image showing the new SAML application form in PingOne](https://cdn.sketch.com/docs/sso/3-ping-identity-create-saml-app.png)

### Configure SAML settings

1. Select the **Manually enter** option.
1. Paste the values you copied when [setting up SAML SSO in your Workspace](/docs/getting-started/single-sign-on/setting-up-saml-sso/choose-a-shortname/):
   - **ACS URLs**: your ACS URL from Sketch
   - **Entity ID**: your Entity ID from Sketch
1. Click **Save**.
1. Scroll down and click **Download Metadata** to save the XML file. You’ll need this to complete setup in Sketch.

![An image showing the Download Metadata button in PingOne](https://cdn.sketch.com/docs/sso/4-ping-identity-download-metadata.png)

### Configure attribute mappings

1. In the Applications list, click your Sketch application to open it.
1. Go to the **Attribute Mappings** tab.
1. Add the following mappings, then click **Save**:

<div class="styled-table styled-table--full">
| Attribute | PingOne mapping |
| --- | --- |
| `email` | Email Address |
| `first_name` | Given Name |
| `surname` | Family Name |
</div>

![An image showing the attribute mappings for the Sketch SAML app in PingOne](https://cdn.sketch.com/docs/sso/5-ping-identity-attribute-mappings.png)

### Set NameID format

1. Go to the **Configuration** tab.
1. Set **NameID Format** to `Email Address` and click **Save**.

![An image showing the NameID Format setting in PingOne](https://cdn.sketch.com/docs/sso/6-ping-identity-nameid-format.png)

### Enable the application

1. At the top of the application panel, toggle the application **on**. Enable it before users can sign in.

Now head to [How to finish setting up SAML SSO in your Workspace](/docs/getting-started/single-sign-on/setting-up-saml-sso/finish-setting-saml-sso/) and upload the PingOne metadata XML file you downloaded earlier.

If you want to automate user provisioning, follow the [Ping Identity SCIM setup guide](/docs/getting-started/single-sign-on/scim-provisioning/ping-identity/) once SSO is working.