# PingOne Configuration
### PingOne
Login to the PingOne Admin portal
From the **PingOne** console menu, select **Applications >** **Application Catalog**
Search "**Keeper**" and click on the **"Keeper Password Manager - On-Prem SSO"** link to add the **Keeper Password Manager** application
Click **Setup** to proceed to the next step
Click **"Continue to Next Step"**
On the Keeper SSO Connect Windows server, download the KeeperSsoMetadata.xml file and save it in a safe location.
Select **Export Metadata** on the Keeper SSO Connect.
Back on the PingOne application configuration, select the **Select File** button and choose the file **KeeperSsoMetadata.xml**.
Then click on **Choose File** next to "Primary Verification Certificate" and upload a valid SSL certificate file.
Click **Continue to Next Step**
Enter the appropriate values associated with each attribute (see below image) and click **Continue to Next Step**
Modify the **Name** to appropriately match the Configuration Name of the SSO node from the **Keeper Admin Console**. Click **Continue to Next Step.**
You may choose to add PingOne user groups to your application. Click **Add** next to the group or groups you would like to add and click **Continue to Next Step**.
{% hint style="info" %}
PingOne users will have access to Keeper Password Manager by default. Assigning groups to Keeper Password Manager restricts access to only those groups.
{% endhint %}
Click **Download** next to "SAML Metadata" and save the `.xml` file to a safe location.
Click **Finish** to complete the application setup wizard.
The **saml2-metadata-idp.xml** file will download to the browser. Copy this file to the Keeper SSO Connect server and upload it into the Keeper SSO Connect interface by dragging and dropping the file into the Setup screen: Select **Save**.
The Keeper Application should be added and enabled.
**Important Note: In the Application Configuration section of your Ping Identity setup, ensure that the "Signing" section has "Sign Response" selected with "RSA\_SHA256" as the Signing Algorithm.**
Your Keeper SSO Connect setup is now complete!
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.keeper.io/sso-connect-on-prem/identity-provider-setup/pingone-configuration.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.