Adding KaseyaOne

Passly supports SAML 2.0 SSO with KaseyaOne (Setup Guide).

Step 0. Create Groups and Authentication Policies (if needed)

1. Go to Directory Manager →  Groups
2. Hover over the Blue button in the bottom right corner → Create New Group
3. Enter the name for the Group (e.g. KaseyaOne Users) →  Add Group
   Note: If you have other existing Groups for SSO users you can use one of these as well
4. Go to Policy Manager → Authentication
5. Hover over the Blue button in the bottom right corner → Create a New Policy
6. See Adding an Authentication Policy
   Note: If you have other existing Authentication Policy for SSO users you can use one of these as well

Step 1. Create KaseyaOne application in Passly -> SSO Manager
Note: Passly supports creation of KaseyaOne application only in Top-Level Organization.

1. Go to SSO Manager
   
   
2. Hover over the Blue button in the bottom right corner → Add new Application to the Library
3. Select KaseyaOne
   
   
4. Click Application Configuration tab
   • Ensure that the Application is enabled.
   • Enter a name for an Application
   • Select the desired Authentication Policy
     
     
5. Click Add Application
6. Go to Protocol Setup tab
   • Enter your 'KaseyaOne Single Sign-On URL' in Assertion Consumer Service URL field
     Note: KaseyaOne SSO URL for your KaseyaOne instance can be found on the KaseyaOne portal, navigate to Admin Settings > Third-Party IdP in the KaseyaOne portal, copy the Single Sign-On URL
     
7. Go to Attribute Transformation tab
   • Click Add Custom Attribute Map
   • Enter 'KaseyaOne Company Identifier' to Attribute Value field
     Note: KaseyaOne Company Identifier for your KaseyaOne instance can be found on the KaseyaOne portal, navigate to Admin Settings > Third-Party IdP, copy the Company Identifier from there and paste it here.
   • Type 'CompanyIdentifier' to Type field
   • Click Add Mapping
     
8. Go to Permissions
   • Click Add Groups → Select the Group
9. Go to Signing and Encryption
   • Click Generate New Certificate
10. Click Save Changes

Step 2. Configure SSO in KaseyaOne for the Passly IdP integration

Go to KaseyaOne documentation portal for details.

Additional Infromation. Login with KaseyaOne button

When both SSO for KaseyaOne via Passly IdP and KaseyaOne Unified Login (see Passly docs and KaseyaOne docs) are Enabled for your Organization in Passly, 'Login with KaseyaOne' button on Passly login page will be disabled.