# Discovering Applications with PingOne SSO

The SailPoint PingOne SSO Discovery connector fetches the details of applications configured in PingOne. It provides continuous application discovery, revealing inventory and ownership across the enterprise while prioritizing governance efforts on high-impact applications. This guide provides instructions to configure a discovery source. For more information, refer to [Discovering Enterprise Applications - SailPoint Identity Services](<https://documentation.sailpoint.com/saas/help/ai/app_onboarding/app_discovery.html#available-discovery-sources>).

## Supported Features

- Test Connection
- Discover Application

## Prerequisites

1. To connect with the PingOne system you will need to get an **API URL**, **Environment ID**, **Token URL**, **Client ID**, and **Client Secret**. These will be used to identify and authenticate your application.
2. Use the PingOne admin console to create your first application connection. To create the application connection, sign in and perform the following:

   1. Select **Connections**.
   2. Select the **\+** icon.
   3. Enter an **Application Name**.
   4. Under **Choose Application Type**, select **Worker**.
   5. Select **Save**.
   6. On the application's Overview page, select the toggle in the top-right corner of the page to enable the application. For information about authentication, refer to [PingOne for Developers](<https://apidocs.pingidentity.com/pingone/main/v1/api/#getting-started-with-the-pingone-apis>).

## Required Permissions

You must have the following roles to access the APIs for users, groups, roles and populations:

- Environment Admin
- Identity Data Admin