How can we help?

OneLogin SSO integration

Laura Dominoni
Laura Dominoni
  • Updated

Plan: Enterprise

Role: AdminOwnerIT manager


OneLogin simplifies authentication and access management across your organization’s apps and services. When integrated with Recruit, OneLogin offers:

  • Automatically sync users between OneLogin and Recruit.

  • Quickly add existing OneLogin users to Recruit.

  • Enable seamless sign-in to Recruit for OneLogin users.

  • Disable access to Recruit by deactivating users in OneLogin.

Before getting started

  • You’ll need admin credentials for your company’s OneLogin account.

  • Provisioned teammates must have required attributes: first name and last name.

  • We recommend opening a support ticket before activating SSO. This allows us to assist quickly if deactivation is needed.

  • For easier setup, keep both OneLogin and Recruit’s Authentication & Security settings pages open side by side.

Configure integration

📝 Note: Adding and provisioning users in SSO does not automatically invite them to Recruit. An existing Recruit user will have to invite you.

  1. Access your OneLogin account > Administration to add the Recruit application in the Applications section.

  2. Search for Recruit (formerly Comeet) and select it from the list:

  3. Under the Configuration tab, add the following information from Recruit's Authentication & Security page:

    • ACS URL (1)

    • Bearer token (2)

  4. Enable the API connection by clicking Enable:

  5. Under the Provisioning tab, check Enable provisioning and Save:

  6. Under SSO tab, copy the value from the SAML 2.0 Endpoint (HTTP) field:

  7. Add it in the User access URL field in Recruit:

  8. In OneLogin, select More Actions > SAML Metadata:

  9. A metadata XML file will be downloaded to your PC. Open the file and copy its contents to the SAML Signing Certificate field in Recruit:

  10. Click Connect.

Activate the OneLogin integration in Recruit and test it

  1. In Recruit, navigate to Settings > Access > Authentication & SSO.

  2. Scroll down to Single Sign-On and find OneLogin on the list.

  3. Click Activate and confirm the activation in the pop-up that appears. Don’t navigate away or close this page.

  4. Open an Incognito window and search for app.comeet.co.

  5. Once the login screen appears, select Sign in with SSO and enter the relevant email address. You should be redirected to OneLogin to log in to your SSO. After logging in:

    1. If you are redirected to the main Recruit dashboard: Great, it works!

    2. If you are redirected to the login page, take a screenshot of what you see and send it to us, then go back to the original window where you activated the SSO, and click Deactivate.

🚨 Activating the SSO will automatically log out all of your users, so we recommend running any tests at times when your team does not have interviews or can step away from the system for the few minutes it'll take to test the integration.

To invite new teammates to Recruit

  1. Ensure the new teammate was created in the SSO system and provisioned to access Recruit.

  2. In Recruit, navigate to the Teammates page and click Add Teammate.

  3. Type the teammate's name and select it from the dropdown.

  4. Click Invite.

Sign up using SSO

There are two options to sign up using SSO:

  • Sign up from Recruit’s website – users are redirected to sign in on your company’s SSO. If they are already signed up, they will be re-directed to Recruit.

  • Sign in through the list of apps in your organization (from OneLogin).

SSO activation/deactivation

SSO activation and deactivation can only be done by your IT Administrator. If the account has been deactivated through SSO, please reach out to your IT Administrator to initiate reactivation via SSO as well.

If a teammate's account has been deactivated via SSO, you will need to reassign their roles in each position. Learn how to deactivate teammates and reassign their roles here.

FAQ

What happens when an employee leaves the company?

Once the employee has been deprovisioned in the SSO system, their access to Recruit will be blocked. On the teammates page, the employee will be marked as “Deactivated by SSO”. To reassign tasks and roles of employees who no longer have access to Recruit, click on Deactivate and choose the teammate to whom you would like to assign their current tasks.

 

Have more questions? Contact us at recruit.support@sparkhire.com

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request

Comments

0 comments

Article is closed for comments.