BambooHR - SSO Configuration

BambooHR - SSO Configuration

Idea
This documentation has been tested and approved by Kelvin Zero's team
Quote
This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Bamboo HR using MPAS. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.
Warning
In order to set up Multi-Pass with BambooHR, you need to be sure that you meet the following requirements:
- BambooHR admin rights
- MPAS Admin rights and SSO metadata
Important: Custom elements in URLs (like realm names) are case sensitive. Make sure to match the exact casing from your environment.

Configuring BambooHR

​
• Start from your dashboard, then click the gear icon in the top right corner.

• Select the “Apps” tab.

• Scroll down through the available apps until you find “SAML Single Sign-On.” Click “Install.”


Notes
By installing this app in your BambooHR account, you enable BambooHR as a service provider for SAML, web-based single sign-on (SSO). 
Upon successful configuration, you will enjoy seamless web-based single sign-on to BambooHR from your single sign-on portal or company intranet.
• To start the SSO configuration, open MPAS in a new tab.


• In MPAS, click “Clients”, then select “Create Client.”
• Complete the required fields with the information provided below.




Notes
Information from BambooHR can be found by clicking here
Client ID : Entity ID / BambooHR-SAML
Home URL : https://ca.auth.kzero.com/realm/<REALM>/protocol/saml/clients/<name>
Valid redirect URI : Reply URL  / https://<tenant>.bamboohr.com/saml/consume.php

• Click “Save.”
• Complete the next fields based on the provided screenshots.





• In the left column, click “Realm Settings” to access the RS256 information required for the X.509 certificate.

Notes
Copy the certificate, and do not forget to add -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- (Without space before the first character and the last one) 
• Go back to BambooHR and paste the Home URL and X.509 certificate into the appropriate box.

    • Related Articles

    • Datadog - SSO configuration

      This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Datadog using MPAS. SSO simplifies user authentication by allowing access to multiple ...

    • Trend Micro - SSO configuration

      This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Trend Micro using MPAS. SSO simplifies user authentication by allowing access to multiple ...

    • Zendesk - SSO configuration

      This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Zendesk using MPAS. SSO simplifies user authentication by allowing access to multiple ...

    • FortiAuthenticator - SSO configuration

      This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for FortiAuthenticator using MPAS. SSO simplifies user authentication by allowing access to ...

    • HaloPSA - SSO configuration

      This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for HaloPSA using MPAS. SSO simplifies user authentication by allowing access to multiple ...