This documentation has been tested and approved by Kelvin Zero's team

This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Bamboo HR using MPAS. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.

In order to set up Multi-Pass with BambooHR, you need to be sure that you meet the following requirements: 

1. BambooHR admin rights 
   
2. MPAS Admin rights and SSO metadata
   

Configuring BambooHR

• Start from your dashboard, then click the gear icon in the top right corner.

• Select the “Apps” tab.

• Scroll down through the available apps until you find “SAML Single Sign-On.” Click “Install.”

By installing this app in your BambooHR account, you enable BambooHR as a service provider for SAML, web-based single sign-on (SSO). 

Upon successful configuration, you will enjoy seamless web-based single sign-on to BambooHR from your single sign-on portal or company intranet.

• To start the SSO configuration, open MPAS in a new tab.

• In MPAS, click “Clients”, then select “Create Client.”

• Complete the required fields with the information provided below.

Information from BambooHR can be found by clicking here

Client ID : Entity ID / BambooHR-SAML

Home URL : https://ca.auth.kzero.com/realm/<REALM>/protocol/saml/clients/<name>

Valid redirect URI : Reply URL  / https://<tenant>.bamboohr.com/saml/consume.php

• Click “Save.”

• Complete the next fields based on the provided screenshots.

• In the left column, click “Realm Settings” to access the RS256 information required for the X.509 certificate.

Copy the certificate, and do not forget to add -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- (Without space before the first character and the last one) 

• Go back to BambooHR and paste the Home URL and X.509 certificate into the appropriate box.