Trend Micro - SSO configuration

This documentation has been tested and approved by Kelvin Zero's team

This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Trend Micro using MPAS. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.

To set up Multi-Pass with Trend Micro, ensure you meet the following requirements:
- Trend Micro admin rights and a business plan
- MPAS Admin rights
- Make sure that all users intended to use SSO in Trend Micro are registered in your IdP and have the necessary permissions to access Trend Micro.
Important: Custom elements in URLs (like realm names) are case sensitive. Make sure to match the exact casing from your environment.
Trend Micro - SSO configuration
Step 1: Prepare Trend Micro for SSO Configuration
- In the Trend Micro dashboard, go to Administration > Identity Provider
- Download the metadata file provided on this page.
- Click on Add Identity Provider — leave the page open for later use.

- Open the following link to access MPAS: https://dashboard.kzero.com/
- Select your deployment.
- In the left menu, click on Admin Console
- Go to Clients > Import a Client
- Upload the Trend Micro metadata file you previously downloaded.
- Locate the client named trendmicro, then complete the following fields:
- Home URL: https://ca.auth.kzero.com/realms/<REALM NAME>/protocol/saml/clients/trendmicro
- IDP-Initiated SSO URL Name: trendmicro
- Click Save
- Go to Realm Settings from the left-side menu.
- Scroll down and click on SAML 2.0 Identity Provider Metadata
- A new window will open.
- Right-click > Save As, and save the metadata as an XML file.
Step 3: Finalize Configuration in Trend Micro
- Return to the Trend Micro Identity Provider setup page.
- Fill in the following:
- Name: e.g., Multi-Pass
- Description: e.g., MPAS Identity Provider
- Click on Upload and select the XML file you downloaded from MPAS.
- Click Save.

You should now see a new entry in the list, corresponding to the Identity Provider you just registered.

Master Administrators Cannot Use SSO
Only standard users can authenticate via Multi-Pass. Master admins must continue using their traditional credentials.
Step 4: Allow Multi-Pass for Specific Users
To allow user access via Multi-Pass:
- Go to Administration > User Account
- Click Add User Account.
- Select SAML Account.
- Fill in the required fields:
- Account (email or username)
- Role
- Description (optional)
- Click Add.
The user will now be able to authenticate using Multi-Pass SAML SSO.
Related Articles
Datadog - SSO configuration
This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Datadog using MPAS. SSO simplifies user authentication by allowing access to multiple ...
BambooHR - SSO Configuration
This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Bamboo HR using MPAS. SSO simplifies user authentication by allowing access to multiple ...
Auvik - SSO configuration
This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Auvik using MPAS. SSO simplifies user authentication by allowing access to multiple ...
Zoho Desk - CIAM Passwordless configuration
This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up MPAS as the CIAM passwordless authentication method for your customers. This integration enhances security and ...
Nextcloud - SSO configuration
This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Nextcloud using MPAS. SSO simplifies user authentication by allowing access to multiple ...