Pipedrive – SSO configuration
This application has been formally tested by Kelvin Zero Inc.
This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Pipedrive using Multi-Pass. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.
To set up Multi-Pass with Pipedrive, ensure you meet the following requirements:
- Pipedrive admin rights
- MPAS Admin rights
- Make sure that all users intended to use SSO in Pipedrive are registered in your IdP and have the necessary permissions to access Pipedrive.
Important: Custom elements in URLs (like realm names) are case sensitive. Make sure to match the exact casing from your environment.
- Pipedrive admin rights
- MPAS Admin rights
- Make sure that all users intended to use SSO in Pipedrive are registered in your IdP and have the necessary permissions to access Pipedrive.
Important: Custom elements in URLs (like realm names) are case sensitive. Make sure to match the exact casing from your environment.
Pipedrive – SSO configuration
Step 1 - Configure Pipedrive to Multi Pass as the Service Provider (SP)
- Log into Pipedrive as an Administrator.
- Navigate to Company Settings.
- Under Security Center, select Single Sign-On (SSO).
- Under SAML Configuration for Pipedrive, enter the following values:
| Field | Value |
|---|---|
| Issuer | https://ca.auth.kzero.com/realms/<TENANT_NAME>/protocol/saml/descriptor |
| Single Sign On (SSO) URL | https://ca.auth.kzero.com/realms/<TENANT_NAME>/protocol/saml |
| X.509 Certificate | Open the SAML metadata descriptor at:https://ca.auth.kzero.com/realms/<TENANT_NAME>/protocol/saml/descriptorLocate the <ds:X509Certificate> tag and copy the certificate contents into the Pipedrive X.509 Certificate field:
-----BEGIN CERTIFICATE----- [Paste the certificate from the XML] -----END CERTIFICATE----- |
- Click Save Changes.
- Under SAML Configuration for your Identity Provider (IdP), click Copy to Clipboard beside Metadata URL.
- Open the Metadata URL in a new browser tab and save the XML file locally.
Step 2 - Configure Multi Pass as the Identity Provider (IdP)
- Open Multi-Pass Dashboard
- Select the correct tenant, then go to Integrations → Applications.
- Select SAML under the Custom Integration section.
- Upload the Pipedrive Metadata XML file you saved earlier.
- Populate the configuration fields as follows:
| Field | Value |
|---|---|
| Client ID (=SP Entity ID) | https://<PIPEDRIVE_SUBDOMAIN>.pipedrive.com/sso/auth/samlp/metadata.xml |
| Name | pipedrive |
| Description | Pipedrive SSO integration |
| Assertion Consumer Service URL | https://<PIPEDRIVE_SUBDOMAIN>.pipedrive.com/sso/auth/samlp |
| NameID Policy Format | Email |
- Click Add Integration.
- Click Advanced Console.
- Click Clients and search for Pipedrive.
- Confirm all the fields are populated according to the tables below
General settings (Multi-Pass)
| Field | Value |
|---|---|
| Client ID | https://<PIPEDRIVE_SUBDOMAIN>.pipedrive.com/sso/auth/samlp/metadata.xml |
| Name | pipedrive |
| Description | Pipedrive SSO integration |
| Always display in UI | ON |
Access settings (Multi-Pass)
| Field | Value |
|---|---|
| Home URL (IdP-initiated) | https://ca.auth.kzero.com/realms/<TENANT_NAME>/protocol/saml/clients/<APP_NAME> |
| Valid Redirect URIs (ACS) | https://<PIPEDRIVE_SUBDOMAIN>.pipedrive.com/sso/auth/samlp |
| IDP-Initiated SSO URL Name | <APP_NAME> |
SAML Capabilities
| Setting | Value |
|---|---|
| Name ID Format | email |
| Force Name ID Format | OFF |
| Force POST Binding | ON |
| Include AuthnStatement | ON |
Signature & Encryption
| Setting | Value |
|---|---|
| Sign Documents | OFF |
| Sign Assertions | ON |
- Navigate to the Keys tab and ensure both parameters are set to OFF.
- Go to the Advanced tab and confirm the following:
- Assertion Consumer Service POST Binding URL =
https://<PIPEDRIVE_SUBDOMAIN>.pipedrive.com/sso/auth/samlp
- Assertion Consumer Service POST Binding URL =
Step 3 - Test Pipedrive to Multi Pass
- Log into Pipedrive as an Administrator.
- Navigate to Company Settings.
- Under Security Center, select Single Sign-On (SSO).
- Select Test in the bottom right corner
- You will be redirected to Multi-Pass. Complete a successful sign in to Multi-Pass and confirm you receive the success banner
Related Articles
Mulesoft - SSO Integration
This application has been formally tested by Kelvin Zero Inc. This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Mulesoft using Multi-Pass. SSO simplifies user authentication by allowing access to multiple ...D2L Brightspace - SSO Integration
This application has not been formally tested by Kelvin Zero Inc. It is provided solely as a reference guide. If you encounter any issues, kindly submit a ticket directly through the support desk. This documentation provides a step-by-step guide to ...Miro - SSO configuration
This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Miro using MPAS. SSO simplifies user authentication by allowing access to multiple ...Checkpoint - SSO Configuration
This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Checkpoint using MPAS. SSO simplifies user authentication by allowing access to multiple ...BambooHR - SSO Configuration
This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Bamboo HR using MPAS. SSO simplifies user authentication by allowing access to multiple ...