Pipedrive – SSO configuration

Pipedrive – SSO configuration

Idea
This application has been formally tested by Kelvin Zero Inc.
Quote
This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Pipedrive using Multi-Pass. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.
Warning
To set up Multi-Pass with Pipedrive, ensure you meet the following requirements:
- Pipedrive admin rights
- MPAS Admin rights
- Make sure that all users intended to use SSO in Pipedrive are registered in your IdP and have the necessary permissions to access Pipedrive.
Important: Custom elements in URLs (like realm names) are case sensitive. Make sure to match the exact casing from your environment.




Pipedrive – SSO configuration





Step 1 - Configure Pipedrive to Multi Pass as the Service Provider (SP)

  • Log into Pipedrive as an Administrator.
  • Navigate to Company Settings.
  • Under Security Center, select Single Sign-On (SSO).

  • Under SAML Configuration for Pipedrive, enter the following values:
Field Value
Issuer https://ca.auth.kzero.com/realms/<TENANT_NAME>/protocol/saml/descriptor
Single Sign On (SSO) URL https://ca.auth.kzero.com/realms/<TENANT_NAME>/protocol/saml
X.509 Certificate Open the SAML metadata descriptor at:
https://ca.auth.kzero.com/realms/<TENANT_NAME>/protocol/saml/descriptor

Locate the <ds:X509Certificate> tag and copy the certificate contents into the Pipedrive X.509 Certificate field: 

-----BEGIN CERTIFICATE-----
[Paste the certificate from the XML]
-----END CERTIFICATE-----


  • Click Save Changes.
  • Under SAML Configuration for your Identity Provider (IdP), click Copy to Clipboard beside Metadata URL.
  • Open the Metadata URL in a new browser tab and save the XML file locally.

Step 2 - Configure Multi Pass as the Identity Provider (IdP)

  • Open Multi-Pass Dashboard
  • Select the correct tenant, then go to Integrations → Applications.
  • Select SAML under the Custom Integration section.

  • Upload the Pipedrive Metadata XML file you saved earlier.

  • Populate the configuration fields as follows:
Field Value
Client ID (=SP Entity ID) https://<PIPEDRIVE_SUBDOMAIN>.pipedrive.com/sso/auth/samlp/metadata.xml
Name pipedrive
Description Pipedrive SSO integration
Assertion Consumer Service URL https://<PIPEDRIVE_SUBDOMAIN>.pipedrive.com/sso/auth/samlp
NameID Policy Format Email


  • Click Add Integration.
  • Click Advanced Console.

  • Click Clients and search for Pipedrive.
  • Confirm all the fields are populated according to the tables below
General settings (Multi-Pass)
FieldValue
Client IDhttps://<PIPEDRIVE_SUBDOMAIN>.pipedrive.com/sso/auth/samlp/metadata.xml
Namepipedrive
DescriptionPipedrive SSO integration
Always display in UION
Access settings (Multi-Pass)
FieldValue
Home URL (IdP-initiated)https://ca.auth.kzero.com/realms/<TENANT_NAME>/protocol/saml/clients/<APP_NAME>
Valid Redirect URIs (ACS)https://<PIPEDRIVE_SUBDOMAIN>.pipedrive.com/sso/auth/samlp
IDP-Initiated SSO URL Name<APP_NAME>
SAML Capabilities
SettingValue
Name ID Formatemail
Force Name ID FormatOFF
Force POST BindingON
Include AuthnStatementON
Signature & Encryption
SettingValue
Sign DocumentsOFF
Sign AssertionsON
  • Navigate to the Keys tab and ensure both parameters are set to OFF.


Step 3 - Test Pipedrive to Multi Pass

  • Log into Pipedrive as an Administrator.
  • Navigate to Company Settings.
  • Under Security Center, select Single Sign-On (SSO).
  • Select Test in the bottom right corner
  • You will be redirected to Multi-Pass. Complete a successful sign in to Multi-Pass and confirm you receive the success banner