This application has been formally tested by Kelvin Zero Inc.

This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Mulesoft using Multi-Pass. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.

To set up Multi-Pass with Mulesoft, ensure you meet the following requirements:

- Mulesoft admin rights
- MPAS Admin rights
- Make sure that all users intended to use SSO in Mulesoft are registered in your IdP and have the necessary permissions to access Mulesoft.

Important: Custom elements in URLs (like realm names) are case sensitive. Make sure to match the exact casing from your environment.

Mulesoft - SSO configuration

Step 1 - Obtain Tenant XML Metadata from Multi-Pass (IdP)

• Open Multi-Pass Dashboard
• Select the correct tenant and go to Integrations, click on Applications
• Select SAML in the custom integration section
  

• Select Download under Tenant XML data and save the file locally
  

Step 2 — Configure Mulesoft as the Service Provider (SP)

• Log into Mulesoft as an Administrator
• Navigate to the Menu Button and select Access Management under Administration
  

• In the left menu select Identity Providers
• Select Add Identity Provider and choose SAML 2.0
  

• Under Import IdP Metadata click Choose file and upload the Tenant XML Metadata from Step 1
• Set the Name to Multi-Pass
• Under Audience type <MULESOFT_SUBDOMAIN>.anypoint.mulesoft.com
• Select Both under Single Sign-On Initiation
  
• Under Advanced Settings, populate the fields according to the table below

• Unselect Require encrypted SAML assertions
• Click Save Changes
• Scroll to the top of the page and download the Mulesoft Metadata file
  

Step 3 — Configure Multi-Pass as the Identity Provider (IdP)

• Open Multi-Pass Dashboard
• Select the correct tenant and go to Integrations, click on Applications
• Select SAML in the custom integration section
  

• Select Upload file and upload your Mulesoft Metadata
  

• Navigate to the Advanced Console by clicking on the right side of your screen
  

• Go to the Keys tab and ensure both parameters are set to OFF
  

• Go to the Advanced tab and set Assertion Consumer Service POST Binding URL to match the Valid Redirect URI
  

Configure User Property mappers to pass user attributes correctly:

• Click the Client scopes tab
• Select the first option in the list
  

• Click Configure a new mapper
  

• Select User Property and create the four User Properties listed below