> ## Documentation Index
> Fetch the complete documentation index at: https://support.affinity.co/llms.txt
> Use this file to discover all available pages before exploring further.

# How To Set Up Ping OpenID For Affinity Access

> Help center reference: How To Set Up Ping OpenID For Affinity Access

<Note>**How-to** — task-oriented recipe.</Note>

Set up a custom application within Ping for authentication into Affinity.

* **Note:** Custom SSO is only available for those on our **Enterprise** tier.

1. Click **Applications** on the left side, then click the **+ Add Application** button on the right.

<img src="https://mintcdn.com/support-affinity/gNHMiKP2aDiIOSeo/images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/1.jpg?fit=max&auto=format&n=gNHMiKP2aDiIOSeo&q=85&s=1e51394fc36332b2a640c22e953aa709" width="3584" height="924" data-path="images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/1.jpg" />

2. Then, select **Web App** and click **Configure** next to the OIDC option.

<img src="https://mintcdn.com/support-affinity/gNHMiKP2aDiIOSeo/images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/2.jpg?fit=max&auto=format&n=gNHMiKP2aDiIOSeo&q=85&s=18ea836b9f2816b4f40c17d246e0462d" width="3578" height="1790" data-path="images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/2.jpg" />

3. On the next screen, add the **Application Name**. The rest of the fields are optional.

<img src="https://mintcdn.com/support-affinity/gNHMiKP2aDiIOSeo/images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/3.jpg?fit=max&auto=format&n=gNHMiKP2aDiIOSeo&q=85&s=f8d79d464775411cf917425e11999992" width="3584" height="1810" data-path="images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/3.jpg" />

4. On the next page, please fill out the appropriate redirect URLs. If you're not sure what your Affinity subdomain is, check out the following article: [How to find your Affinity subdomain](/s/article/How-to-find-your-Affinity-subdomain)
   1. Required: `https://[subdomain].affinity.co/auth/sso/openid-callback`
   2. For Affinity's Mobile App: `AffinitySSOLogin://login`

<img src="https://mintcdn.com/support-affinity/gNHMiKP2aDiIOSeo/images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/4.jpg?fit=max&auto=format&n=gNHMiKP2aDiIOSeo&q=85&s=f7664b32ece5035da5e03a1553d88fe7" width="3578" height="1800" data-path="images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/4.jpg" />

5. No additional scopes are required in the section titled **Grant Access to Your Application**. Feel free to leave everything as is and click **Save and Continue**.

<img src="https://mintcdn.com/support-affinity/gNHMiKP2aDiIOSeo/images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/5.jpg?fit=max&auto=format&n=gNHMiKP2aDiIOSeo&q=85&s=f382ab546554b504b9112f7571c025e6" width="3572" height="1712" data-path="images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/5.jpg" />

6. Under **ODIC ATTRIBUTES**, please do the following:
   1. Click **+ ADD ATTRIBUTE** and select "Email Address" for the **PINGONE USER ATTRIBUTE** field.
   2. Make sure to type in "email" for the **APPLICATION ATTRIBUTE** field.
   3. Make sure to click the checkbox to make it **Required**.
   4. Finally, click **Save and Close**.

<img src="https://mintcdn.com/support-affinity/gNHMiKP2aDiIOSeo/images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/6.jpg?fit=max&auto=format&n=gNHMiKP2aDiIOSeo&q=85&s=edb308324b02dc9492bb120bfad0efb1" width="3584" height="1800" data-path="images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/6.jpg" />

7. Now, click the **Edit** icon to the right.

<img src="https://mintcdn.com/support-affinity/gNHMiKP2aDiIOSeo/images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/7.jpg?fit=max&auto=format&n=gNHMiKP2aDiIOSeo&q=85&s=8b2d105a58dc37262336ade37fda8750" width="3108" height="770" data-path="images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/7.jpg" />

8. Click on the **Configuration** tab, then change the **TOKEN ENDPOINT AUTHENTICATION METHOD** to **Client Secret Post**. Finally, click **Save and Close**.

<img src="https://mintcdn.com/support-affinity/gNHMiKP2aDiIOSeo/images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/8.jpg?fit=max&auto=format&n=gNHMiKP2aDiIOSeo&q=85&s=40a76a72c63a3ec18bc446603ac714e0" width="3208" height="1742" data-path="images/admin-account-auth/how-to-set-up-ping-openid-for-affinity-access/8.jpg" />

9. Now that we're finished with the set up, please send over the following details to [support@affinity.co](mailto:support@affinity.co) and mention that you're setting up Ping (OpenID):
   * Client ID
   * Client Secret
   * OIDC Discovery Endpoint
