Calendly - SSO configuration
This documentation has been tested and approved by Kelvin Zero's team
This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Calendly using MPAS. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.
To set up Multi-Pass with Calendly, ensure you meet the following requirements:
- Calendly admin rights
- MPAS Admin rights
- Make sure that all users intended to use SSO in Calendly are registered in your IdP and have the necessary permissions to access Calendly.
Important: Custom elements in URLs (like realm names) are case sensitive. Make sure to match the exact casing from your environment.
Calendly - SSO configuration
Step 1 - Configure Calendly as the Service Provider (SP)
- Log into Calendly as an Administrator
- Browse to Admin center
- Click on Login and then select Single sign-on
- In Step 1, populate the information based on the table below
| Field | Value |
|---|---|
| Entity ID | https://ca.auth.kzero.com/realms/<TENANT_NAME> |
| Identity provider’s SAML HTTP Request URL | https://ca.auth.kzero.com/realms/<TENANT_NAME>/protocol/saml |
| x.509 certificate for SAML authentication | Instructions in Step 2 of this guide |
Step 2 - Configure Multi-Pass as the Identity Provider (IdP)
- Select the correct tenant and go to Integrations, click on Applications
- Select in the custom integration section SAML
- Return to Multi-Pass and complete the SAML setup with the below information
| Field | Value |
|---|---|
| Client ID (=SP Entity ID) | https://calendly.com/sso/saml/metadata/<CALENDLY_ID> |
| Name | calendly |
| Description | Calendly SSO integration |
| Assertion Consumer Service URL | https://calendly.com/sso/saml/acs/<CALENDLY_ID> |
| NameID Policy Format |
- Under Tenant certificate select Download and save the .pem file
- Return to Calendly and upload the .pem file in x.509 certificate for SAML authentication
- Select Save and Continue in Calendly
- Click add integration
- Click Advanced Console
- Click Clients and search for Calendly
- Please verify that fields are well completed :
General settings
| Field | Value |
|---|---|
| Client ID | https://calendly.com/sso/saml/metadata/<CALENDLY_ID> |
| Name | calendly |
| Description | Calendly SSO integration |
| Always display in UI | ON |
Access settings
| Field | Value |
|---|---|
| Home URL (IdP-initiated) | https://ca.auth.kzero.com/<TENANT_NAME>/protocol/saml/clients/<APP_NAME> |
| Valid Redirect URIs (ACS) | https://calendly.com/sso/saml/acs/<CALENDLY_ID> |
| IDP-Initiated SSO URL Name | <APP_NAME> |
SAML Capabilities
| Setting | Value |
|---|---|
| Name ID Format | |
| Force Name ID Format | ON |
| Force POST Binding | ON |
| Include AuthnStatement | ON |
Signature & Encryption
| Setting | Value |
|---|---|
| Sign Documents | OFF |
| Sign Assertions | ON |
- Now that you have checked the different parameters, change to the tab called Keys.
- Make sure that both parameters are switched to OFF.
- Now go to the Advanced tab.
- The field Assertion Consumer Service POST Binding URL must equal the Valid Redirect URIs (ACS).
Step 3 - Testing Multi-Pass to Calendly
- In Calendly turn on Enable SSO for yourself
- Select Test Connection
- If the test works, you’ll see a success banner.
- If it fails, check that:
- The user’s IdP email matches their Calendly email.
- The attributes in your IdP are mapped correctly.
Related Articles
SAML SSO Integration Guide
This guide provides an overview of how to configure SAML Single Sign-On (SSO) between Multi-Pass and a third-party Service Provider (SP). Multi-Pass acts as the Identity Provider (IdP) in this federation model. Multi-Pass is working on SCIM support ...Rocket.chat - SSO configuration
This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Rocket.chat using MPAS. SSO simplifies user authentication by allowing access to multiple ...D2L Brightspace - SSO Integration
This application has not been formally tested by Kelvin Zero Inc. It is provided solely as a reference guide. If you encounter any issues, kindly submit a ticket directly through the support desk. This documentation provides a step-by-step guide to ...Wrike - SSO configuration
This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Wrike using MPAS. SSO simplifies user authentication by allowing access to multiple ...Grammarly - SSO configuration
Please note that this application has not been formally tested by Kelvin Zero Inc. It is provided solely as a reference guide. If you encounter any issues, kindly submit a ticket directly through the support desk. This documentation provides a ...