---
title: SAASPASS Configuration
slug: kronpam-reference-guide-3-9-0/saaspass-configuration
docTags: 
createdAt: 2026-05-10T12:38:59.259Z
---

Login to your SAASPASS account, and go to the “Add Secure Applications”.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/NV438M2aU3M2zlKYfYCwD_image.png)

Then search for “Custom & Generic SAML” then click **ADD:**

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/jtbPKNXx-7FV5m8Awzaif_image.png)

Give a name for your application at the first step on the Configuration step:

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/pALw8PyFmtbirfuKLnjbt_image.png)

Then go to the Manual Configuration section of Application Configuration under the Configuration step and fill the information like below:

| ENTITY ID                             | *https\://kronpam.krontech.com/aioc-rest-web/servlet/saml/samlCheck*     |
| ------------------------------------- | ------------------------------------------------------------------------ |
| ACS (Assertion Consumer Service) URL  | *https\://kronpam.krontech.com/aioc-rest-web/servlet/saml/samlRecipient* |
| AUDIENCE (OPTIONAL)                   | *https\://kronpam.krontech.com/aioc-rest-web/servlet/saml/samlCheck*     |
| DESTINATION URL (OPTIONAL)            | *https\://kronpam.krontech.com/aioc-rest-web/servlet/saml/samlRecipient* |

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/--xgQVnPs6kHY5AnODk0e_image.png)

Then go to the “Advance SAML Configurations” section” under the Configuration step and set the following:

| Field                      | Value      |
| -------------------------- | ---------- |
| SIGNATURE METHOD ALGORITHM | RSA-SHA256 |
| DIGEST METHOD ALGORITHM    | SHA256     |
| SIGNING OPTIONS            | ASSERTION  |

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/yLZOJ-EeBXds7pu7OdqlM_image.png)

Now pass the second step “User Authentication Management” give the necessary users to access this application.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/2t3MTL6zbCtcxD7W9j4gA_image.png)

And jump to the “Integration” part of this page for the necessary configuration to apply on Kron PAM.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Dhc3W1Vy6xJFbZ_N8Eqqu_image.png)

**On Kron PAM Side:**

1-     Go to the System Configuration Manager

2-     On Integrations tab click SAML Configuration Section then do the below configurations 

3-     Enable the SAML then enter the below information from SAASPASS to Kron PAM

| **SAASPASS**                     | **KRON PAM**         |
| -------------------------------- | -------------------- |
| Issuer/Entity ID -->             | SAML Entity ID       |
| SAML Login URL/SAML Endpoint-->  | SAML Login URL       |
| Logout URL-->                    | SAML Logout URL      |
| Certificate -->                  | SAML X509 Certf. Key |

:::hint{type="info"}
**For SAML Remote URL : You can write KRON PAM’s DNS or IP address. No need to write something from SAASPASS.**

**SAML Launcher URL field is also optional.**
:::

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/SdiBTFjQgthyWftIlmzp__image.png "Kron PAM and SAASPASS configuration")

:::hint{type="warning"}
Don’t forget to edit the Cors filter as explained on [Azure AD Configuration](docId\:zHLYQoQgGvFq7SPuu6zBS).
:::