Permissions: Basic and above who can manage SSO
Product tier: Available for Advanced and Expert subscription tiers
Okta provides cloud software that helps companies manage and secure user authentication into modern applications, and for developers to build identity controls into applications, website web services, and devices.
Greenhouse Recruiting's integration with Okta allows your organization to use Okta to enable Single Sign-On (SSO) in your Greenhouse Recruiting account.
Configure Greenhouse Recruiting in your Okta Account
To add the Greenhouse Recruiting application to Okta, you will first need to obtain your ACS URL from Greenhouse Recruiting.
To gather this information, navigate to the Configure icon > Dev Center > Single Sign-On. From the Single Sign-On page, click Copy next to the SSO Assertion Consumer URL field. Save this information to add in Okta in a later step.
Once you have your ACS URL from Greenhouse Recruiting, navigate to your Okta administrator console and click Applications.
Use the provided search bar to search for Greenhouse and click Greenhouse Recruiting.
Navigate to the General tab for the Greenhouse application and confirm the information is correct. When you're finished, click Done.
On the Sign On tab, click Edit.
Click SAML 2.0 and enter your ACS URL in the SSO Assertion Consumer URL field. Click View Setup Instructions on the SAML 2.0 tile and copy your IdP metadata. Save the metadata in a safe place, you'll need to enter this later in Greenhouse Recruiting in a later step.
When you're finished, click Save.
Navigate to the Assignments tab and assign all relevant users to the application.
Enable SSO in Greenhouse Recruiting
Once you have added Greenhouse Recruiting to Okta and gathered the necessary information, follow the steps outlined here to finish enabling Single Sign-On in Greenhouse Recruiting.
- All users MUST log in through Okta once SSO is enabled. Users won't be able to use their username and password on the Greenhouse Recruiting login screen, even if have previously used their passwords.
- If a new user has an Okta account but not a Greenhouse Recruiting account, Greenhouse Recruiting will create a Greenhouse Recruiting user account for them automatically the first time they log in via Okta. The user account will be created with Basic permissions. Administrators can still invite users and change permissions in Greenhouse Recruiting using our existing process.
- Data will be unaffected. Your users will still have access to all of their existing jobs, scorecards, interviews, etc. Okta only changes the way users log in.