Pulseway - SSO Configuration
This documentation has been tested and approved by Kelvin Zero's team
This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Pulseway using Multi-Pass via OpenID Connect (OIDC). SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.
To configure Multi-Pass SSO with Pulseway, ensure you meet the following requirements:
- Pulseway Administrator access
- MPAS Admin rights
- All users intended to use SSO in Pulseway must be registered in your IdP and have the necessary permissions.
Important: Custom elements in URLs (like tenant names or unique strings) are case sensitive. Match the exact casing from your environment.
- Pulseway Administrator access
- MPAS Admin rights
- All users intended to use SSO in Pulseway must be registered in your IdP and have the necessary permissions.
Important: Custom elements in URLs (like tenant names or unique strings) are case sensitive. Match the exact casing from your environment.
Pulseway - SSO Configuration
Step 1 - Configure Multi-Pass as the Identity Provider (IdP)
- Open Multi-Pass Dashboard
- Select the correct tenant and go to Integrations, click on Applications.
- In the custom integration section, select OIDC.
- Complete the following fields and save the client:
| Field | Value |
|---|---|
| Client ID (=SP Entity ID) | pulseway |
| Name | pulseway |
| Description | Pulseway SSO Integration |
| Client Authentication | ON |
| Home URL | https://<PULSEWAY_SUBDOMAIN>.pulseway.com/app/oidc/login |
| Valid Redirect URIs | https://<PULSEWAY_SUBDOMAIN>.pulseway.com/app/oidc/logincallback |
- Click Add Integration
- Open the Advanced Console (icon on the left side of your screen).
- Click Clients and search for pulseway.
- Ensure all fields match the values below.
General settings (Multi-Pass)
| Field | Value |
|---|---|
| Client ID | pulseway |
| Name | pulseway |
| Description | Pulseway SSO Integration |
| Always display in UI | ON |
Access settings (Multi-Pass)
| Field | Value |
|---|---|
| Home URL | https://<PULSEWAY_SUBDOMAIN>.pulseway.com/app/oidc/login |
| Valid Redirect URIs (ACS) | https://<PULSEWAY_SUBDOMAIN>.pulseway.com/app/oidc/logincallback |
Capability Config
| Setting | Value |
|---|---|
| Client Authentication | ON |
| Authentication Flow | Standard Flow & Direct Access Grants |
- Open the Credentials tab, copy the Secret Key, and store it securely for use in Step 2.
Step 2 - Configure Pulseway as the Service Provider (SP)
- Log into Pulseway as an Administrator.
- Browse to Configuration > Settings > External Authentication > OpenID Connect Login Settings.
- Toggle the switch to Active.
- Scroll down to OpenID Connect Configuration Information.
- Complete the following fields and click Save:
| Field | Value |
|---|---|
| OpenID Configuration URL | https://ca.auth.kzero.com/realms/<TENANT_NAME>/.well-known/openid-configuration |
| Client ID | pulseway |
| Client Secret | Obtained in Step 1 |