Trend Micro - SSO configuration

Trend Micro - SSO configuration

Idea
This documentation has been tested and approved by Kelvin Zero's team
Quote
This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Trend Micro using MPAS. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.
Warning
To set up Multi-Pass with Trend Micro, ensure you meet the following requirements:
- Trend Micro admin rights and a business plan
- MPAS Admin rights
- Make sure that all users intended to use SSO in Trend Micro are registered in your IdP and have the necessary permissions to access Trend Micro.
Important: Custom elements in URLs (like tenant names) are case sensitive. Make sure to match the exact casing from your environment.



Trend Micro - SSO configuration




Step 1 - Prepare Trend Micro for SSO Configuration

  1. In the Trend Micro dashboard, go to Administration > Identity Provider

  1. Download the metadata file provided on this page.

  1. Click on Add Identity Provider — leave the page open for later use.


Step 2 - Configure MPAS with Trend Micro Metadata

  1. Open Multi-Pass Dashboard
  2. Select your deployment.
  3. In the left menu, click on Admin Console
  4. Go to Clients > Import a Client

  1. Upload the Trend Micro metadata file you previously downloaded.

  1. Locate the client named trendmicro, then complete the following fields:
    1. Home URL: https://ca.auth.kzero.com/realms/<REALM NAME>/protocol/saml/clients/trendmicro
    2. IDP-Initiated SSO URL Name: trendmicro
  2. Click Save
  3. Go to Realm Settings from the left-side menu.
  4. Scroll down and click on SAML 2.0 Identity Provider Metadata

  1. A new window will open.

  1. Right-click > Save As, and save the metadata as an XML file.

Step 3 - Finalize Configuration in Trend Micro

  1. Return to the Trend Micro Identity Provider setup page.
  2. Fill in the following:
    1. Name: e.g., Multi-Pass
    2. Description: e.g., MPAS Identity Provider
  3. Click on Upload and select the XML file you downloaded from MPAS.

  1. Click Save.
Notes
You should now see a new entry in the list, corresponding to the Identity Provider you just registered.
Notes
Master Administrators Cannot Use SSO
Only standard users can authenticate via Multi-Pass. Master admins must continue using their traditional credentials.

Step 4 - Allow Multi-Pass for Specific Users

To allow user access via Multi-Pass:
  1. Go to Administration > User Account
  2. Click Add User Account.
  3. Select SAML Account.
  4. Fill in the required fields:
    1. Account (email or username)
    2. Role
    3. Description (optional)

  1. Click Add.
The user will now be able to authenticate using Multi-Pass SAML SSO.