Syncro - SSO configuration

Syncro - SSO configuration

This documentation has been tested and approved by Kelvin Zero's team
This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Syncro using MPAS. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.
To set up Multi-Pass with Syncro, ensure you meet the following requirements:
- Syncro admin rights
- MPAS Admin rights
- Make sure that all users intended to use SSO in Syncro are registered in your IdP and have the necessary permissions to access Syncro.
Important: Custom elements in URLs (like realm names) are case sensitive. Make sure to match the exact casing from your environment.



Syncro - SSO configuration




Step 1 – Get the Required URLs from Syncro

  1. Log in to your Syncro dashboard.
  2. On the top-right, click More, then select Admin.

  1. In the left panel under Syncro Administration, click Login Settings.
  1. On the login settings page:
    1. Copy the following values, which will be used in MPAS:
      1. Redirect (callback) URL
      2. Logout URL


Step 2 – Configure the Client in Multi-Pass (MPAS)


  1. Open Multi-Pass Dashboard


  1. Select your tenant, then click on Advanced Console in the left-hand menu.
  1. Click on Clients, then Create a client.
  1. Fill in the following fields:
FieldValue
Client TypeOpenID Connect
Client IDsyncro
NameSyncro
DescriptionTest SSO
Always Display in UION


  1. Click Next, then click Next again.
  2. Fill in the following values:
FieldValue
Home URLhttps://ca.auth.kzero.com/realms/<TENANT_NAME>/protocol/saml/clients/<SP_Name>
Valid Redirect URIsPaste Redirect (callback) URL from Syncro
Valid Post Logout Redirect URIsPaste Logout URL from Syncro
Web OriginsPaste Redirect (callback) URL from Syncro
IDP-Initiated SSO URL Namesyncro


  1. Click Save

Step 3 – Enable Client Authentication and Copy the Secret

  1. Scroll down to the Capability config section.
  1. Switch Client authentication to ON and click Save.
  2. Go to the Credentials tab at the top of the client page.
  3. Copy the Client Secret value using the copy icon.


Step 4 – Finalize Configuration in Syncro

  1. Back in Syncro, complete the following fields:
FieldValue
Client IDsyncro (same as configured in MPAS)
Client SecretPaste the one copied from MPAS
Client Secret Expiration Date(Optional)
OpenID Connect Discovery Documenthttps://ca.auth.kzero.com/realms/<TENANT_NAME>
  1. Scroll down and click Save.
  2. Toggle the Enable switch to ON.
  1. Scroll down again and click Save to confirm.