This documentation has been tested and approved by Kelvin Zero's team

This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Bamboo HR using MPAS. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.

In order to set up Multi-Pass with BambooHR, you need to be sure that you meet the following requirements:

- BambooHR admin rights

- MPAS Admin rights and SSO metadata

Important: Custom elements in URLs (like realm names) are case sensitive. Make sure to match the exact casing from your environment.

Configuring BambooHR

​

​

• Start from your dashboard, then click the gear icon in the top right corner.

• Select the “Apps” tab.

• Scroll down through the available apps until you find “SAML Single Sign-On.” Click “Install.”

By installing this app in your BambooHR account, you enable BambooHR as a service provider for SAML, web-based single sign-on (SSO). 

Upon successful configuration, you will enjoy seamless web-based single sign-on to BambooHR from your single sign-on portal or company intranet.

• To start the SSO configuration, open MPAS in a new tab.

1. ​Open Multi-Pass Dashboard
   
2. In MPAS, click “Clients”, then select “Create Client.”
   
3. Complete the required fields with the information provided below.
   

Information from BambooHR can be found by clicking here

Client ID : Entity ID / BambooHR-SAML

Home URL : https://ca.auth.kzero.com/realm/<REALM>/protocol/saml/clients/<name>

Valid redirect URI : Reply URL  / https://<tenant>.bamboohr.com/saml/consume.php

• Click “Save.”

• Complete the next fields based on the provided screenshots.

• In the left column, click “Realm Settings” to access the RS256 information required for the X.509 certificate.

Copy the certificate, and do not forget to add -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- (Without space before the first character and the last one) 

• Go back to BambooHR and paste the Home URL and X.509 certificate into the appropriate box.