Google Workspace SSO allows users to access multiple Google Workspace apps and services using a single set of login credentials. SSO enhances security and simplifies the user experience by eliminating the need for users to remember and manage multiple usernames and passwords for different Google Workspace services.

• Keep Recruit in sync with the company’s Google Workspace account.

• Current users in Google Workspace can easily be added to Recruit.

• One-click login into Recruit for Google Workspace users.

• Disabling the user’s access to the application through Google Workspace will block them from accessing Recruit.

Before getting started

• You’ll need admin credentials for your company’s Google Workspace account.

• Provisioned teammates must have required attributes: first name and last name.

• We recommend opening a support ticket before activating SSO. This allows us to assist quickly if deactivation is needed.

• For easier setup, keep both Google Workspace and Recruit’s Authentication & Security settings pages open side by side.

Configure integration

Create an app in Google

1. Connect to your G-Suite Workspace: https://admin.google.com/.

2. Select Web and mobile apps in the Apps menu and click the + sign to add a new app.

   
   

3. Search for Recruit and select the Recruit app.

   

4. On the next menu, download the IDP metadata XML file (under Option 1) and proceed to the next step.

   

5. Open the Metadata file in a text editor, copy the content, and paste into the SAML Signing Certificate field in Recruit.

   

6. Copy the ACS URL and Entity ID from Recruit and paste them into the corresponding fields in G-Suite

   
   

7. Make sure the Name ID Format is set to EMAIL and click Continue to proceed to the next step.

   

8. In the Attribute mapping menu, under Google Directory attributes, select Primary email under Basic Information in the dropdown:

   

You should be redirected to the main page.

Set up provisioning

1. In G-Suite, click on Configure Autoprovisioning:

   

2. Copy the Secret Token from Recruit:

   

3. Paste under App Authorization field in G Suite:

   

4. In the Map attributes menu, review the Recruit attributes section and make sure your mappings are configured the same as in the screenshot below.

   

5. Under Provisioning Scope, select the relevant user groups OR, if you'd like all the company users to be auto-provisioned, leave this field empty:

   

6. Under Deprovisioning, make sure the values are set as follows:

   

7. Back on the main screen of Recruit app in G-Suite, click View Details under the User Access section. This will determine if the Recruit app will be visible to the user in G-Suite.

   

8. You can select the relevant groups of users OR just choose ON for everyone:

   

9. Once the Recruit app is available in G-Suite, find it under the Apps menu.

   

10. Right-click on the Recruit app and copy the link address:

    

11. Navigate back to the Authentication menu in Recruit's system settings and paste the copied value in the SAML SSO URL field.

     

    

12. Click Connect.

13. Back in G-Suite > Recruit App, activate Autoprovisioning.

     

    

14. On the next screen, click Turn On under Status.

    

Activate the Google Workspace integration in Recruit and test it

1. In Recruit, go to Settings > Access > Authentication & SSO.

2. Scroll down to Single Sign-On and find G Suite on the list. You will see a notification about teammates synced with SSO.

3. Click Activate and confirm the activation in the pop-up that appears. Don’t navigate away or close this page.

4. Open an Incognito window and search for app.comeet.co.

5. Once the login screen appears, select Sign in with SSO and enter the relevant email address. After logging in:

   • If you are redirected to the main Recruit dashboard: Great, it works!

   • If you are redirected to the login page, take a screenshot of what you see and send it to us, then go back to the original window where you activated the SSO and click Deactivate.

Invite teammates to Recruit

To invite new teammates to Recruit:

1. Ensure the new teammate was created in the SSO system and provisioned to access Recruit.

2. In Recruit, navigate to the Teammates page and click ➕ Add teammate.

3. Type the teammate's name and select it from the dropdown.

4. Click Invite.

Sign up using SSO

There are two options to sign up using SSO:

• Sign up from Recruit’s website – users are redirected to sign in on your company’s SSO. If they are already signed up, they will be redirected to Recruit.

• Sign in through the list of apps in your organization (from Google Workspace).

  

SSO activation/deactivation

SSO activation and deactivation can only be done by your IT Administrator. If the account has been deactivated through SSO, please reach out to your IT Administrator to initiate reactivation via SSO as well.

If a teammate's account has been deactivated via SSO, you will need to reassign their roles in each position. Learn how to deactivate teammates and reassign their roles here.

FAQ

Have more questions? Contact us at recruit.support@sparkhire.com