Syncro - SSO configuration
This documentation has been tested and approved by Kelvin Zero's team
This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Syncro using MPAS. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.
To set up Multi-Pass with Syncro, ensure you meet the following requirements:
- Syncro admin rights
- MPAS Admin rights
- Make sure that all users intended to use SSO in Syncro are registered in your IdP and have the necessary permissions to access Syncro.
Important: Custom elements in URLs (like realm names) are case sensitive. Make sure to match the exact casing from your environment.
Syncro - SSO configuration
Step 1 – Get the Required URLs from Syncro
- Log in to your Syncro dashboard.
- On the top-right, click More, then select Admin.
- In the left panel under Syncro Administration, click Login Settings.
- On the login settings page:
- Copy the following values, which will be used in MPAS:
- Redirect (callback) URL
- Logout URL
Step 2 – Configure the Client in Multi-Pass (MPAS)
- Select your tenant, then click on Advanced Console in the left-hand menu.
- Click on Clients, then Create a client.
- Fill in the following fields:
| Field | Value |
|---|---|
| Client Type | OpenID Connect |
| Client ID | syncro |
| Name | Syncro |
| Description | Test SSO |
| Always Display in UI | ON |
- Click Next, then click Next again.
- Fill in the following values:
| Field | Value |
|---|---|
| Home URL | https://ca.auth.kzero.com/realms/<TENANT_NAME>/protocol/saml/clients/<SP_Name> |
| Valid Redirect URIs | Paste Redirect (callback) URL from Syncro |
| Valid Post Logout Redirect URIs | Paste Logout URL from Syncro |
| Web Origins | Paste Redirect (callback) URL from Syncro |
| IDP-Initiated SSO URL Name | syncro |
- Click Save
Step 3 – Enable Client Authentication and Copy the Secret
- Scroll down to the Capability config section.
- Switch Client authentication to ON and click Save.
- Go to the Credentials tab at the top of the client page.
- Copy the Client Secret value using the copy icon.
Step 4 – Finalize Configuration in Syncro
- Back in Syncro, complete the following fields:
| Field | Value |
|---|---|
| Client ID | syncro (same as configured in MPAS) |
| Client Secret | Paste the one copied from MPAS |
| Client Secret Expiration Date | (Optional) |
| OpenID Connect Discovery Document | https://ca.auth.kzero.com/realms/<TENANT_NAME> |
- Scroll down and click Save.
- Toggle the Enable switch to ON.
- Scroll down again and click Save to confirm.
Related Articles
OpenID Connect (OIDC) SSO Integration Guide
This guide provides a general overview and step-by-step instructions for configuring OpenID Connect (OIDC) authentication between Multi-Pass (IdP) and a third-party Service Provider (SP). OIDC is a modern identity layer built on top of OAuth 2.0 that ...Addigy - SSO configuration
This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Addigy using MPAS. SSO simplifies user authentication by allowing access to multiple ...Trend Micro - SSO configuration
This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Trend Micro using MPAS. SSO simplifies user authentication by allowing access to multiple ...Auvik - SSO configuration
This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Auvik using MPAS. SSO simplifies user authentication by allowing access to multiple ...BambooHR - SSO Configuration
This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Bamboo HR using MPAS. SSO simplifies user authentication by allowing access to multiple ...