1. Prerequisites

• PingOne Administrator access to the PingOne Admin Console
• Snow Atlas Administrator access, with permissions to configure Generic SSO.
• Values from your Snow Atlas “.well-known” configuration (Initiate Login URI, Target Link URI, Signoff URLs, etc.)

2. In PingOne: Create a New OIDC Application

1. Log in to the PingOne Admin Console.
2. Navigate to Applications → My Applications → Add Application.
3. Select OIDC Application, then click Next.
4. Name the app (e.g. “Snow Atlas SSO”).
5. Under Redirect & URLs, configure the following:

• Redirect URIs: As specified in the Snow Atlas docs –
  https://docs-snow.flexera.com/snow-atlas/user-documentation/snow-atlas-settings/authentication/single-sign-on/generic-sso/configure-generic-sso/

• JWKS URL: change the {region} to your Snow Atlas region -  https://{region}.snowsoftware.io/idp/.well-known/jwks 

• Additional Endpoints:
1. Open the the .well-known/openid-configuration link in in your browser to view details, but first change the {region} to your region - https://{region}.snowsoftware.io/idp/.well-known/openid-configuration
2. Copy values for Initiate Login URI, Target Link URI, Signoff URLs, etc., and paste them into the corresponding fields in PingOne.
5. Click Save to create the application shell.

Note:

1. If you encounter any issues on the PingOne side, please liaise with PingOne Support for further assistance.

2.  Be aware of the difference between PingOne (Cloud) and PingFederate (On-Prem).
   While both are accessed via a browser, PingOne is a fully cloud-managed service, whereas PingFederate is self-hosted and requires on-premise infrastructure.  This KB specifically covers the configuration for PingOne (Cloud).

Here’s an example PingOne configuration for Snow Atlas:

3. In Snow Atlas: Add the Single Sign-On Configuration

1. Log in to the Snow Atlas Admin portal.
2. Navigate to Settings → Account Management → Security → Add Single Sign-On.
3. Under the Generic SSO section, enter the values you obtained from PingOne. 
4. For detailed field descriptions and exact values, refer to the “Find values to set up generic SSO configuration in Snow Atlas” section of the Snow Atlas documentation:
   https://docs-snow.flexera.com/snow-atlas/user-documentation/snow-atlas-settings/authentication/single-sign-on/generic-sso/configure-generic-sso/

Once saved, test the SSO flow to confirm users can log in via PingOne.

Where to find all the required information?

1. redirect URL from here https://docs-snow.flexera.com/snow-atlas/user-documentation/snow-atlas-settings/authentication/single-sign-on/generic-sso/configure-generic-sso/
2. and the rest of the information from the well-known configuration, from here https://docs-snow.flexera.com/snow-atlas-api/resources/get-started-with-apis/api-authentication/

access this via browser, but first change {region} to your region - https://{region}.snowsoftware.io/idp/.well-known/openid-configuration