Active Campaign - SSO configuration

Please note that this application has not been formally tested by Kelvin Zero Inc. It is provided solely as a reference guide. If you encounter any issues, kindly submit a ticket directly through the support desk.

This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for ActiveCampaign using MPAS. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.

To set up Multi-Pass with ActiveCampaign, ensure you meet the following requirements:

1. ActiveCampaign admin rights
   
2. MPAS Admin rights
   
3. Make sure that all users intended to use SSO in ActiveCampaign are registered in your IdP and have the necessary permissions to access ActiveCampaign.
   

Important: Custom elements in URLs (like realm names) are case sensitive. Make sure to match the exact casing from your environment.

Active Campaing - SSO configuration

Step 1 — Configure in ActiveCampaign (Service Provider)

1. Log in to your ActiveCampaign account as Admin.
   
2. Click Settings (gear icon) > Security.
   
3. Find the Single Sign-On box and click the toggle to set it to the On position.
   
4. Choose your Sign In Method by clicking the dropdown.
   
5. Type the name of the identity provider into the Name of Secure Login Provider field.
   

ActiveCampaign Values

Field	Value
Sign-on URL	https://<ACCOUNT_NAME>.activehosted.com/sso/saml/consume
Audience URI (SP Entity ID)	https://<ACCOUNT_NAME>.activehosted.com
NameID Format	EmailAddress

Detail Setup

Field	Value
SAML metadata	Paste the IdP metadata from Multi-Pass (XML)
Name of Secure Login Provider	Multi-Pass

• Click the Save / Save settings button in ActiveCampaign.
  

Step 2 — Configure in Multi-Pass (Identity Provider)

1. Open Multi-Pass Dashboard
   

1. Select your tenant
   
2. Go to Integrations
   
3. Click on Applications.
   
4. In the Custom section, choose SAML.

1. You will arrive on the form to complete.
   

Field	Value
Name	ActiveCampaign
Description	SSO SAML integration for ActiveCampaign
SP Entity ID	https://<ACCOUNT_NAME>.activehosted.com
ACS URL	https://<ACCOUNT_NAME>.activehosted.com/sso/saml/consume
NameID Format	EmailAddress

1. Click on Advanced Console.
   

1. Select Client, search for the integration you just created.
   

1. And verify the fields below : 
   

General settings

Field	Value
Client ID	https://<ACCOUNT_NAME>.activehosted.com
Description	SSO SAML integration for ActiveCampaign
Always Display in UI	ON

Access settings

Field	Value
Home URL	https://ca.auth.kzero.com/realms/<TENANT_NAME>/protocol/saml/clients/ActiveCampaign
Valid Redirect URIs	https://<ACCOUNT_NAME>.activehosted.com/sso/saml/consume
IDP-Initiated SSO URL Name	ActiveCampaign

SAML Capabilities

Setting	Value
Force Name ID Format	ON
Force POST Binding	ON
Include AuthnStatement	ON

Signature & Encryption

Setting	Value
Sign Documents	OFF
Sign Assertions	ON

1. Now that you have checked the different parameters, change to the tab called Keys.
   
2. Make sure that both parameters are switched to OFF.
   
3. Now go to the Advanced tab.
   
4. The field Assertion Consumer Service POST Binding URL must equal the Valid Redirect URIs (ACS).
   

• Related Articles

• SAML SSO Integration Guide

  This guide provides an overview of how to configure SAML Single Sign-On (SSO) between Multi-Pass and a third-party Service Provider (SP). Multi-Pass acts as the Identity Provider (IdP) in this federation model. Multi-Pass is working on SCIM support ...

• D2L Brightspace - SSO Integration

  This application has not been formally tested by Kelvin Zero Inc. It is provided solely as a reference guide. If you encounter any issues, kindly submit a ticket directly through the support desk. This documentation provides a step-by-step guide to ...

• Mulesoft - SSO Integration

  This application has been formally tested by Kelvin Zero Inc. This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Mulesoft using Multi-Pass. SSO simplifies user authentication by allowing access to multiple ...

• CrowdStrike - SSO Configuration

  Please note that this application has not been formally tested by Kelvin Zero Inc. It is provided solely as a reference guide. If you encounter any issues, kindly submit a ticket directly through the support desk This documentation provides a ...

• Adobe - SSO Configuration

  This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Adobe using Multi-Pass. SSO simplifies user authentication by allowing access to multiple ...