Plan: Enterprise
Role: Admin ✧ Owner ✧ IT manager
Okta is a leading cloud-based identity and access management (IAM) platform that provides secure authentication, single sign-on (SSO), multi-factor authentication (MFA), user provisioning, and more.
With the Recruit integration, you can:
Keep Recruit in sync with your company’s Okta account.
Add existing Okta users to Recruit with ease.
Let Okta users sign in to Recruit with a single click.
Disabling a user in Okta automatically blocks access to Recruit.
Before getting started
You’ll need admin credentials for your company’s Okta account.
Provisioned teammates must have required attributes: first name and last name.
We recommend opening a support ticket before activating SSO. This allows us to assist quickly if deactivation is needed.
Configure the integration
-
Add the Recruit (former Comeet) application from the applications menu.
Navigate to the General tab in the Recruit application in Okta and copy the value that's registered in the Embed link field.
In Recruit, from your avatar at the top right, go to Settings > System > Authentication & Security, and click Connect to connect with Okta.
-
Paste the copied value under the SAML Signing Certificate field.
Navigate to the Sign On tab on Okta and click Identity Provider metadata. A new tab should automatically open with the metadata file.
-
Copy the URL of the new tab and paste it back in Recruit under the Metadata URL field.
-
Copy the Single sign on URL and SP Entity ID from Recruit, navigate back to the Sign On tab in Okta, and paste both values in their respective fields under the Advanced Sign-On Settings header.
Navigate back to Settings > System > Authentication & Security in Recruit and click Connect to connect with Okta.
Set up provisioning
⚠️ Important: Users must have a first and last name to be provisioned in Recruit.
-
Navigate back to Okta, select the Provisioning tab, and click Configure API Integration.
Enable the API integration.
-
Back in Recruit, copy the value from the Okta OAuth Bearer Token field, paste it in Okta under the API Token field, and test the API credentials.
If the test is successful, click Save and proceed to the next steps.
If the test is unsuccessful, verify that the token was properly copied and that previous steps have been completed according to the instructions.
-
Once the API integration has been enabled, navigate to the Provisioning to App menu and make sure that the following three fields are enabled:
Create Users
Update User Attributes
Deactivate Users
-
From Recruit Attributes Mappings in the same menu, make sure your mappings are configured as follows:
Add users to be provisioned in Recruit
⚠️Important: You need to enable the API integration before adding users or groups to Recruit.
-
Navigate to the Assignment tab and assign the relevant users/groups to Recruit’s application. The synchronization of the users from Okta might take a few minutes.
Activate the Okta integration in Recruit and test it
In Recruit, navigate to Settings > Access > Authentication & SSO.
-
Scroll down to Single Sign-On and find Okta on the list. You will see a notification about teammates synced with SSO.
Click Activate and confirm the activation in the pop-up that appears. Don’t navigate away or close this page.
Open an Incognito window and search for app.comeet.co.
-
Once the login screen appears, select Sign in with SSO and enter the relevant email address. After logging in:
If you are redirected to the main Recruit dashboard: Great, it works!
If you are redirected to the login page, take a screenshot of what you see and send it to us, then go back to the original window where you activated the SSO and click Deactivate.
🚨 Activating the SSO will automatically log out all of your users, so we recommend running any tests at times when your team does not have interviews or can step away from the system for the few minutes it'll take to test the integration.
Invite teammates to Recruit
To invite new teammates to Recruit:
Ensure the new teammate was created in the SSO system and provisioned to access Recruit.
In Recruit, navigate to the Teammates page and click Add Teammate.
Type the teammate's name and select it from the dropdown.
Click Invite.
Sign up using SSO
There are two options to sign up using SSO:
Sign up from Recruit website – users are redirected to sign in on your company’s SSO. If they are already signed up, they will be redirected to Recruit.
Sign in through the list of apps in your organization (from Okta).
SSO activation/deactivation
SSO activation and deactivation can only be done by your IT Administrator. If the account has been deactivated through SSO, please reach out to your IT Administrator to initiate reactivation via SSO as well.
If a teammate's account has been deactivated via SSO, you will need to reassign their roles in each position. Learn how to deactivate teammates and reassign their roles here.
FAQ
What happens when an employee leaves the company?
Once the employee has been deprovisioned in the SSO system, their access to Recruit will be blocked. On the teammates page, the employee will be marked as “Deactivated by SSO”. To reassign tasks and roles of employees that no longer have access to Recruit, click on Deactivate and choose the teammate to whom you would like to assign their current tasks.
How are permissions and roles managed in Recruit?
Have more questions? Contact us at recruit.support@sparkhire.com
Comments
0 comments
Article is closed for comments.