Odoo - SSO configuration

Odoo - SSO configuration

Idea
This documentation has been tested and approved by Kelvin Zero's team
Quote
This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Odoo using MPAS. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.
Warning
To set up Multi-Pass with Odoo, ensure you meet the following requirements:
- Odoo admin rights
- MPAS Admin rights
- Make sure that all users intended to use SSO in Odoo are registered in your IdP and have the necessary permissions to access Odoo.
Important: Custom elements in URLs (like realm names) are case sensitive. Make sure to match the exact casing from your environment.


Odoo - SSO configuration


Step 1: Enable OAuth in Odoo

  1. Go to General Settings in Odoo.
  2. Locate "OAuth Authentication" and enable it.

  1. Click Save and log out / log back in.
  2. Return to OAuth Authentication and click OAuth Providers.
  3. Click New to create a new provider – keep this page open.

Step 2: Access the Multi-Pass Configuration

  1. In a new browser tab, open your Multi-Pass dashboard - https://dashboard.kzero.com/

  1. Go to: Realm > Integrations > Applications > Odoo.


  1. In Odoo, fill in the following fields:
    1. Provider Name: Multi-Pass
    2. Client ID: odooapp (or any identifier you choose)
    3. Allowed: True
    4. Login Button Label: Login with Multi-Pass
    5. Authorization URL: Copy from Multi-Pass dashboard
    6. Scope: openid profile email
    7. User Info URL: Copy from Multi-Pass dashboard
    8. Data Endpoint: Leave blank

  1. In Multi-Pass, fill in:
    1. Odoo Instance URL: Your Odoo URL (e.g. https://your-odoo-instance.odoo.com)
    2. Client ID: Use the same value as entered in Odoo
    3. Authorization URL : automatically provided by MPAS (e.g. https://ca.auth.kzero.com/realms/<REALM NAME>/protocol/openid-connect/auth)
    4. UserInfo URL : automatically provided by MPAS (e.g. https://ca.auth.kzero.com/realms/<REALM NAME/protocol/openid-connect/userinfo)
    5. Click on Add integration


Step 4: Add OAuth Header in Odoo

  1. Go to General Settings.
  2. Activate Developer Mode.

  1. Go to Technical > System Parameters (top menu).

  1. Click New and fill in:
    1. Key: auth_oauth.authorization_header
    2. Value: 1


Managing User Access in Odoo


Assign Multi-Pass to an Existing User

  1. Go to Settings > Users & Companies > Users.
  2. Select the target user.
  3. Under the OAuth section:
    1. OAuth Provider: Select Multi-Pass.
    2. OAuth User ID: Enter the user's email (must match Multi-Pass).

Add a New User with Multi-Pass

  1. Go to Settings > Users & Companies > Users.
  2. Click New.
  3. Fill in required information (e.g. name, email, access rights).
  4. Under the OAuth section:
    1. OAuth Provider: Select Multi-Pass.
    2. OAuth User ID: Enter the user's email (must match Multi-Pass).


Notes
Free Sign-Up Enabled
If “Free Sign-Up” is enabled in Odoo, any user present in Multi-Pass can log into Odoo by default.
By default, they will be added as external / portal users, unless manually updated to internal users.
Notes
Admin with Multiple Databases
If you: Are the owner of a database, have multiple Odoo databases, and want to use Multi-Pass to access a specific one—You will not be able to log in through your general portal. Instead, go directly to: https://your-instance.odoo.com like any other user.




      • Related Articles

      • Datadog - SSO configuration

        This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Datadog using MPAS. SSO simplifies user authentication by allowing access to multiple ...

      • HaloPSA - SSO configuration

        This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for HaloPSA using MPAS. SSO simplifies user authentication by allowing access to multiple ...

      • Auvik - SSO configuration

        This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Auvik using MPAS. SSO simplifies user authentication by allowing access to multiple ...

      • Trend Micro - SSO configuration

        This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Trend Micro using MPAS. SSO simplifies user authentication by allowing access to multiple ...

      • Zoho One - SSO configuration

        This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Zoho One using MPAS. SSO simplifies user authentication by allowing access to multiple ...