1. Greenhouse Support
  2. All Recruiting topics
  3. Integrations
  4. Single sign-on (SSO)

Okta single sign-on integration

Permissions: Basic and above who can manage SSO

Product tier: Available for Advanced and Expert subscription tiers

Okta provides cloud software that helps companies manage and secure user authentication into modern applications, and for developers to build identity controls into applications, website web services, and devices.

Greenhouse Recruiting's integration with Okta allows your organization to use Okta to enable Single Sign-On (SSO) in your Greenhouse Recruiting account.

In this article

Configure Greenhouse Recruiting in your Okta Account

To add the Greenhouse Recruiting application to Okta, you will first need to obtain your ACS URL from Greenhouse Recruiting.

To gather this information, navigate to the Configure Configure-icon.png icon > Dev Center > Single Sign-On. From the Single Sign-On page, click Copy next to the SSO Assertion Consumer URL field. Save this information to add in Okta in a later step.

Screenshot-of-copy-Assertation-URL.png

Once you have your ACS URL from Greenhouse Recruiting, navigate to your Okta administrator console and click Applications.

Use the provided search bar to search for Greenhouse and click Greenhouse Recruiting.

1.png

Navigate to the General tab for the Greenhouse application and confirm the information is correct. When you're finished, click Done.

Application_label.png

On the Sign On tab, click Edit.

Sign_On_tab.png

Click SAML 2.0 and enter your ACS URL in the SSO Assertion Consumer URL field. Click View Setup Instructions on the SAML 2.0 tile and copy your IdP metadata. Save the metadata in a safe place, you'll need to enter this later in Greenhouse Recruiting in a later step.

When you're finished, click Save.

enter_ACS_URL.png

Navigate to the Assignments tab and assign all relevant users to the application.

Assignments.png

Enable SSO in Greenhouse Recruiting

Once you have added Greenhouse Recruiting to Okta and gathered the necessary information, follow the steps outlined here to finish enabling Single Sign-On in Greenhouse Recruiting.

Notes

  • All users MUST log in through Okta once SSO is enabled. Users won't be able to use their username and password on the Greenhouse Recruiting login screen, even if have previously used their passwords.
  • If a new user has an Okta account but not a Greenhouse Recruiting account, Greenhouse Recruiting will create a Greenhouse Recruiting user account for them automatically the first time they log in via Okta. The user account will be created with Basic permissions. Administrators can still invite users and change permissions in Greenhouse Recruiting using our existing process.
  • Data will be unaffected. Your users will still have access to all of their existing jobs, scorecards, interviews, etc. Okta only changes the way users log in.