The Authentication & SSO page helps you manage login security for your team in Recruit. From this page, you can set up single sign-on (SSO), multi-factor authentication (MFA), password rotation, and inactivity expiry to protect accounts and meet security requirements.

Access points

Access points let you restrict which IP addresses can log in to Recruit. This adds an extra layer of control by blocking login attempts from unknown networks. It’s especially helpful for teams that mainly work from fixed office locations, since you can limit access to trusted networks only.

To add a new access point:

1. From the left-side menu, navigate to Settings > Access > Authentication & SSO.
2. In the Access points section, click ➕ Add access point.
3. Enter the IP address and (optionally) add a name to help identify it.
4. Click Add.

Single Sign-On (SSO)

Connect Recruit to your identity provider so teammates can log in with a single step. This centralizes access management and reduces the need for password-based logins.

To integrate Recruit with your single sign-on provider:

1. From the left-side menu, go to Settings > Access > Authentication & SSO.
2. Follow the provider-specific guide to complete the setup.

3. Once connected, activate SSO to require all teammates to log in this way.

   

User authentication

User authentication settings apply only to teammates who log in with an email and password. These options let you add extra layers of protection for accounts, beyond the standard login: they don’t apply to users signing in with SSO, Google, or LinkedIn.)

Scheduled password updates

With scheduled password updates, you can require teammates to change their password on a regular basis. This helps prevent compromised credentials from being reused and keeps your team aligned with security standards.

• Enable/Disable: Admins can turn this setting on or off at any time in Settings > Access > Authentication & SSO > Scheduled password updates.
• Password expiration period: Select how often teammates must reset their password (default: 180 days).

Email verification step on login

Add an extra layer of security by requiring a one-time verification code, sent to the teammate’s email, whenever they sign in with a password. This protects accounts even if a password is compromised.

Have more questions? Contact us at recruit.support@sparkhire.com