---
title: Application trusted issuer assignments
description: Assign a third-party token issuer to an application
component: pingone-api
page_id: pingone-api:platform:applications/application-trusted-issuer-assignments/index
canonical_url: https://developer.pingidentity.com/pingone-api/platform/applications/application-trusted-issuer-assignments/index.html
llms_txt: https://developer.pingidentity.com/pingone-api/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2026-11-01
section_ids:
  trusted-issuer-assignments-data-model: Trusted issuer assignments data model
  trusted-issuer-assignments-events-generated: Trusted issuer assignments events generated
---

# Application trusted issuer assignments

The trusted issuer assignments endpoint associates a trusted issuer with a specified application. By assigning trusted issuers to an application's configuration, the PingOne authorization server will accept third-party signed JWTs (as subject or actor tokens in a token exchange action) from the trusted issuer.

Trusted issuers can be assigned to applications that use the token exchange grant type (`urn:ietf:params:oauth:grant-type:token-exchange`). In these cases, the `subject_token_type` or `actor_token_type` parameter value must be set to `urn:ietf:params:oauth:token-type:jwt`.

## Trusted issuer assignments data model

| Property           | Type   | Required | Mutable   | Description                                                                 |
| ------------------ | ------ | -------- | --------- | --------------------------------------------------------------------------- |
| `application`      | Object | Required | Mutable   | Object that contains the application ID.                                    |
| `application.id`   | String | Required | Mutable   | The ID associated with the resource.                                        |
| `environment`      | Object | N/A      | Immutable | Object that contains the environment ID.                                    |
| `environment.id`   | String | N/A      | Immutable | The identifier of the environment resource referenced by this relationship. |
| `trustedIssuer`    | Object | Required | Mutable   | Object that contains the trusted issuer ID.                                 |
| `trustedIssuer.id` | String | Required | Mutable   | The ID associated with the resource.                                        |

## Trusted issuer assignments events generated

Refer to [Audit Reporting Events](../../reference/audit-reporting-events.html) for the events generated.