Ping Federate & Ping Identity SAML SSO Setup Example
PingOne Configuration
Add new application
- Click blue circle with the - +sign.  
- Select - Manual Enter, enter URLs from the Label Studio Enterprise SAML SSO page.  
- The result  
Overview Tab
 
Configuration Tab
 
 
Attributes Tab
You should use this group value in mapping:
Expression: ${user.memberOfGroupNames == null ? '': #string.join(user.memberOfGroupNames, ',')} 
Policies Tab
 
Access Tab
 
Users & Groups
warning
All users should have at least one group, otherwise it will lead to the login error.
Label Studio Enterprise Settings
You can find LSE SAML SSO settings on the Organization page >> SAML SSO. You are able to map user roles and workspaces with Groups attribute.  
 
Login using SSO
Now you are able to login using your SSO session, write your company domain on the SSO Login page:
 
Administrators can find the domain on the SAML SSO page:
