This application has not been formally tested by Kelvin Zero Inc. It is provided solely as a reference guide. If you encounter any issues, kindly submit a ticket directly through the support desk.

This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Optimizely using Multi-Pass. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.

To configure Multi-Pass SSO with Optimizely, ensure you meet the following requirements:
- Optimizely Administrator access
- MPAS Admin rights
- All users intended to use SSO in Optimizely must be registered in your IdP and have the necessary permissions.
Important: Custom elements in URLs (like tenant names or unique strings) are case sensitive. Match the exact casing from your environment.

Optimizely - SSO Configuration

Step 1 - Obtain a Certificate File from Multi-Pass

• Open Multi-Pass Dashboard
• Select the correct tenant and go to Integrations, then click on Applications.
• Select SAML in the custom integration section.
  

• Under Tenant Certificate, toggle the first box to Crt and click Download.
  

• Save the file locally for later use.
  

Step 2 - Configure Optimizely as the Service Provider (SP)

• Log into your Opti ID as an Administrator.
• Navigate to Settings > SSO > Add SSO Connection > SAML.
• Complete the fields based on the table below:

• Under Signature Certificate, click Select file… and upload the .crt file obtained in Step 1.
• Click Save.
• Copy the Audience URL and Assertion Consumer Service URL from the SSO Connection Details section and save them for use in Step 3.
  

Step 3 - Configure Multi-Pass as the Identity Provider (IdP)

• Open Multi-Pass Dashboard
• Select the correct tenant and go to Integrations, then click on Applications.
• Select SAML in the custom integration section and complete the setup with the table below.
  

• Click Add Integration
  
• Browse to the Advanced Console by clicking on the left side of your screen
  

• Click Clients and search for Optimizely.
• Ensure all fields match the settings below.
  

• Go to the Keys tab and ensure both parameters are set to OFF.
  

• In the Advanced tab, confirm that the Assertion Consumer Service POST Binding URL matches the Valid Redirect URIs (ACS): https://login.optimizely.com/sso/saml2/<UNIQUE_STRING>.