Active Campaign - SSO configuration
Please note that this application has not been formally tested by Kelvin Zero Inc. It is provided solely as a reference guide. If you encounter any issues, kindly submit a ticket directly through the support desk.
This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for ActiveCampaign using MPAS. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.
To set up Multi-Pass with ActiveCampaign, ensure you meet the following requirements:
- ActiveCampaign admin rights
- MPAS Admin rights
- Make sure that all users intended to use SSO in ActiveCampaign are registered in your IdP and have the necessary permissions to access ActiveCampaign.
Important: Custom elements in URLs (like realm names) are case sensitive. Make sure to match the exact casing from your environment.
Active Campaing - SSO configuration
Step 1 — Configure in ActiveCampaign (Service Provider)
- Log in to your ActiveCampaign account as Admin.
- Click Settings (gear icon) > Security.
- Find the Single Sign-On box and click the toggle to set it to the On position.
- Choose your Sign In Method by clicking the dropdown.
- Type the name of the identity provider into the Name of Secure Login Provider field.
ActiveCampaign Values
| Field | Value | |||
|---|---|---|---|---|
| Sign-on URL | https://<ACCOUNT_NAME>.activehosted.com/sso/saml/consume | |||
| Audience URI (SP Entity ID) | https://<ACCOUNT_NAME>.activehosted.com | |||
| NameID Format | EmailAddress |
Detail Setup
| Field | Value |
|---|---|
| SAML metadata | Paste the IdP metadata from Multi-Pass (XML) |
| Name of Secure Login Provider | Multi-Pass |
- Click the Save / Save settings button in ActiveCampaign.
Step 2 — Configure in Multi-Pass (Identity Provider)
- Select your tenant
- Go to Integrations
- Click on Applications.
- In the Custom section, choose SAML.
- You will arrive on the form to complete.
| Field | Value |
|---|---|
| Name | ActiveCampaign |
| Description | SSO SAML integration for ActiveCampaign |
| SP Entity ID | https://<ACCOUNT_NAME>.activehosted.com |
| ACS URL | https://<ACCOUNT_NAME>.activehosted.com/sso/saml/consume |
| NameID Format | EmailAddress |
- Click on Advanced Console.
- Select Client, search for the integration you just created.
- And verify the fields below :
General settings
| Field | Value | |
|---|---|---|
| Client ID | https://<ACCOUNT_NAME>.activehosted.com | |
| Description | SSO SAML integration for ActiveCampaign | |
| Always Display in UI | ON |
Access settings
| Field | Value |
|---|---|
| Home URL | https://ca.auth.kzero.com/realms/<TENANT_NAME>/protocol/saml/clients/ActiveCampaign |
| Valid Redirect URIs | https://<ACCOUNT_NAME>.activehosted.com/sso/saml/consume |
| IDP-Initiated SSO URL Name | ActiveCampaign |
SAML Capabilities
| Setting | Value |
|---|---|
| Force Name ID Format | ON |
| Force POST Binding | ON |
| Include AuthnStatement | ON |
Signature & Encryption
| Setting | Value |
|---|---|
| Sign Documents | OFF |
| Sign Assertions | ON |
- Now that you have checked the different parameters, change to the tab called Keys.
- Make sure that both parameters are switched to OFF.
- Now go to the Advanced tab.
- The field Assertion Consumer Service POST Binding URL must equal the Valid Redirect URIs (ACS).