---
title: Platform SSO and Authorization
description: Workflows showing how to use PingOne platform APIs to configure applications, sign-on policies, and user resources for authorization and authentication
component: pingone-api
page_id: pingone-api:workflow-library:platform-sso-and-authorization/index
canonical_url: https://developer.pingidentity.com/pingone-api/workflow-library/platform-sso-and-authorization/index.html
llms_txt: https://developer.pingidentity.com/pingone-api/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2026-08-11
---

# Platform SSO and Authorization

These workflows show you how to use the platform APIs to configure applications, sign-on policies, and user resources in your test environment and perform authorization and authentication actions. These use cases often call the following platform API resources:

| Platform API                                                           | Description                                                                                                                          |
| ---------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
| [OpenID Connect/OAuth 2](../../auth/openid-connect-oauth-2/index.html) | The PingOne authorization endpoint is used to interact with the resource owner and obtain an authorization grant.                    |
| [Flows](../../auth/flows/flows-1/index.html)                           | The flow endpoint is used to interact with the user in a sign-on workflow.                                                           |
| [SAML 2.0](../../auth/saml-2.0/index.html)                             | The SAML endpoints are used by SAML applications to initiate sign-on and signoff operations.                                         |
| [Applications](../../platform/application-management.html)             | Application resources define the connection between PingOne and the actual application, commonly referred to as a client connection. |
| [Sign-On Policies](../../platform/sign-on-policies/index.html)         | Sign-on policies determine the account authentication flow users must complete to access applications secured by PingOne services.   |
| [Resources](../../platform/resources/index.html)                       | Resources are the protected endpoints that applications request access to using OAuth 2 authorization services.                      |