Permissions: Basic users or above, who can manage and configure SSO

Product tier: Available for Advanced and Expert subscription tiers

If your organization manages user access through Google Apps, you can easily set up Single Sign-On (SSO) to allow your users to log into Greenhouse Recruiting using their employee Google account.

Note: Click here for more information on Single Sign-On.

Once SSO is enabled, all users must log in through Google Apps and won't be able to use their previous username and password.

Logging in through Google Apps only changes the way a user logs in to Greenhouse Recruiting and doesn't change anything else associated with their Greenhouse Recruiting account. In other words, if a user had an existing Greenhouse Recruiting account, they'll still be able to access their jobs, candidates, interviews, and other data as normal.

Note: If a new user has a Google Apps account, but not a Greenhouse Recruiting account, Greenhouse Recruiting will automatically create a Greenhouse user account the first time they sign in using Google Apps. By default, this account will be assigned Basic permissions. Site Admins can update these permissions on the Configure page.

Set up SSO for Greenhouse Recruiting

Note: This process is based on Google's standard SSO setup steps, outlined here.

Log into Greenhouse Recruiting and copy your SSO Assertion Consumer URL in the Dev Center. (Configure > Dev Center > Single Sign-On > SSO Assertion Consumer URL)

Screenshot-of-copy-Assertation-URL.png

In another tab, sign in to your Google Admin console and navigate to the Web and mobile apps page. (Home > Apps > Web and mobile apps)

Screenshot-of-web-and-mobile-app-menu.png

Click Add app at the top of the page and select Add custom SAML app.

Screenshot-of-custom-SAML-app-menu-item.png

Enter the App name and click Continue. If needed, you can enter an optional description and app icon on this page.

Screenshot-of-Greenhouse-Recruiting-app-name.png

Enter the following information on the Service Provider Details page:

  • Entity ID: greenhouse.io
  • Assertion Consumer Service (ACS) URL: The ACS URL previously copied from Greenhouse Recruiting
  • Name ID format: EMAIL
  • Name ID: Basic Information > Primary email

Screenshot-of-GHR-privder-details.png

Map the following information on the Attributes page and click Finish. The text must exactly match the text below (including capitalization) in order for the integration to work correctly

Basic information App attributes
First name User.FirstName
Last name User.LastName
Primary email NameID

Select Download Metadata on the saved tile. 

Screenshot-of-download-metadata.png

Navigate back to the Dev Center in Greenhouse Recruiting and finish the Single Sign-On setup outlined in this article.

Once you're finished, take the following steps:

  • Grant users access to Greenhouse Recruiting in your Google Admin Console under User Access
    Screenshot-of-user-access-button.png
  • Finish setup in Greenhouse Recruiting by completing the remaining fields in the Dev Center (Configure > Dev Center > Single Sign-On)
  • Finish overall SSO setup and move your integration to a hard-enabled state by following the steps in this document

Note: For troubleshooting guidance for common SAML errors, click here.

Set up SSO for Greenhouse Onboarding

Sign in to your Google Admin console and navigate to the Web and mobile apps page. (Home > Apps > Web and mobile apps)

Screenshot-of-web-and-mobile-app-menu.png

Click Add app at the top of the page and select Add custom SAML app.

Screenshot-of-custom-SAML-app-menu-item.png

Enter the App name and click Continue. If needed, you can enter an optional description and app icon on this page.

Screenshot-of-Greenhouse-Onboarding-app-name.png

Enter the following information on the Service Provider Details page:

  • Entity ID: app.parklet.co
  • Assertion Consumer Service (ACS) URL: https://onboarding.greenhouse.io/saml/ [ Greenhouse Onboarding UID] /consume
    Note: You'll need to replace the bracketed section above with your Greenhouse Onboarding unique identifier (UID). Click here to contact Greenhouse Support and retrieve your UID
  • Name ID format: EMAIL
  • Name ID: Basic Information > Primary email

Screesnhot-of-GHO-provider-details.png

Map the following information on the Attributes page and click Finish. The text must exactly match the text below (including capitalization) in order for the integration to work correctly

Basic information App attributes
First name User.FirstName
Last name User.LastName
Primary email NameID

Screenshot-of-attributes-field.png

Select Download Metadata on the saved tile.

Screenshot-of-download-metadata.png

After you've downloaded the metadata file, navigate back to the Dev Center in Greenhouse Recruiting and finish the Single Sign-On setup outlined in this article.

After you've finished setup in Greenhouse recruiting, you'll need to grant users access to Greenhouse Onboarding in your Google Admin Console under User Access

Screenshot-of-user-access-button.png

Note: For troubleshooting guidance for common SAML errors, click here.