Plan: Enterprise
Role: Admin ✧ Owner ✧ IT manager
Microsoft Entra ID enables organizations to establish trust relationships between their Active Directory domain and external systems, allowing users to access multiple applications and services with a single set of credentials.
Keep Recruit up to date with your company’s Google Workspace account.
Easily add existing Google Workspace users to Recruit.
Google Workspace users can access Recruit with a single sign-in.
Disabling a user in Google Workspace will automatically block their access to Recruit.
Before getting started
You’ll need admin credentials for your company’s Microsoft Entra ID account.
Provisioned teammates must have required attributes: first name and last name.
We recommend opening a support ticket before activating SSO. This allows us to assist quickly if deactivation is needed.
Configure integration
📝 Note: Adding and provisioning users in SSO does not automatically invite them to Recruit. An existing Recruit user will have to invite you.
1. Create a new application
-
From Applications > Enterprise applications, search for "Comeet Recruiting Software" application from the gallery.
-
Select the Recruit application, navigate to the Single sign-on tab, and click SAML.
In Recruit, from your avatar at the top right, navigate Settings > System > Authentication & Security and select the Entra ID application.
-
Copy the Identifier and Reply URL values from Recruit and paste them under the Identifier (Entity ID) and Reply URL (Assertion Consumer Service URL) fields in Entra ID. The Sign-on URL field in Entra ID should be empty. Save your changes.
-
Download the Federation Metadata XML file, open it with a text editor (for example, Notepad or Notepad++), and copy the value in the file.
-
Back in the Authentication menu in Recruit, click Connect in the Entra ID, and paste the copied value under the SAML Signing Certificate field.
-
Under the Properties tab in Entra ID, copy the User access URL value and paste it back into Recruit, under the User access URL field.
Click Connect.
-
Navigate back to the Single sign-on tab in Entra ID and click the ✏️ pencil icon in the User Attributes & Claims field. Select ➕ Add a new claim.
-
Register “comeet_id” (case sensitive) in the Name field and select “user.userprincipalname” in the Source attribute field. Save your changes.
-
Delete all other claims and only leave the newly created claim “comeet_id”.
Navigate to the Provisioning tab and select Automatic under the Provisioning Mode field.
-
Copy your company’s Secret Token from Recruit and paste the value under the Secret Token field in Entra ID.
At this point, you can test the connection to make sure it’s working properly.
-
Click Save.
-
Select Provision Azure Active Directory Users under the Mappings field.
-
Make sure it’s enabled and configured as follows:
2. Add users to be provisioned in Recruit
⚠️ Important: Users must have a first and last name to be provisioned in Recruit.
-
Navigate to Users and Groups and assign the relevant users/groups to Recruit’s application.
Navigate back to the Provisioning tab, turn on the Provisioning Status, and make sure the Scope is set to Sync only assigned users and groups.
📝 Note: It’s best to turn on Provisioning after adding users/groups to the Recruit application, or the synchronization might take longer to complete.
⏰ The synchronization of the users from Entra ID might take up to 40 minutes.
Activate the Entra ID integration in Recruit and test it
In Recruit, navigate to Settings > Access > Authentication & SSO.
Scroll down to Single Sign-On and find Entra ID on the list. You will see a notification about teammates synced with SSO.
-
Click Activate and confirm the activation in the pop-up that appears. Don’t navigate away or close this page.
Open an Incognito window and search for app.comeet.co.
-
Once the login screen appears, select Sign in with SSO and enter the relevant email address. After logging in:
If you are redirected to the main Recruit dashboard: Great, it works!
If you are redirected to the login page, take a screenshot of what you see and send it to us, then go back to the original window where you activated the SSO and click Deactivate.
🚨 Activating the SSO will automatically log out all of your users, so we recommend running any tests at times when your team does not have interviews or can step away from the system for the few minutes it'll take to test the integration.
Invite teammates to Recruit
To invite new teammates to Recruit:
Ensure the new teammate was created in the SSO system and provisioned to access Recruit.
In Recruit, navigate to the Teammates page and click Add Teammate.
Type the teammate's name and select it from the dropdown.
Click Invite.
Sign up using SSO
There are two options to sign up using SSO:
Sign up from Recruit’s website – users are redirected to sign in on your company’s SSO. If they are already signed up, they will be re-directed to Recruit.
-
Sign in through the list of apps in your organization (from Entra ID).
SSO activation/deactivation
SSO activation and deactivation can only be done by your IT Administrator. If the account has been deactivated through SSO, please reach out to your IT Administrator to initiate reactivation via SSO as well.
If a teammate's account has been deactivated via SSO, you will need to reassign their roles in each position. Learn how to deactivate teammates and reassign their roles here.
FAQ
What happens when an employee leaves the company?
Once the employee has been deprovisioned in the SSO system, their access to Recruit will be blocked. On the teammates page, the employee will be marked as “Deactivated by SSO”. To reassign tasks and roles of employees that no longer have access to Recruit, click on Deactivate and choose the teammate to whom you would like to assign their current tasks.
How are permissions managed in Recruit?
Have more questions? Contact us at recruit.support@sparkhire.com
Comments
0 comments
Article is closed for comments.