Single Sign-On (SSO) enables users to access multiple applications with one set of login credentials.
By enabling SSO into JazzHR through Okta, you’ll be able to simplify password management, reduce IT friction, and create a more secure level of organizational access to JazzHR.
Looking for another identity provider? Learn about our custom SAML framework.
To start enabling users to SSO into JazzHR using Okta, please add your IT Admin as a Super Administrator in JazzHR and direct them to the steps below:
- Configure SSO with OKTA in JazzHR
- Assign Users to the JazzHR Application
- Test Configuration
- Enable SSO
Note that configuring SSO via Okta in JazzHR requires advanced IT setup.
Configure SSO with Okta in JazzHR
- Log into your JazzHR account.
- Click Settings.
- Click People.
- Click the green + symbol next to Single-Sign-On.
- Select Okta as the Authentication Strategy
- Click Save and Continue.
- Copy the JazzHR Identifier.
- In a separate window, log in to Okta and navigate to Applications.
- Click +Add Application.
- Type JazzHR into the search bar and click to Add.
- Click Next.
Under Sign On Methods, click View Setup Instructions in the yellow text block.
A new page hosted by Okta will open. Skip to Step 4, copy and paste the provided values from Okta into JazzHR:
- Okta Single Sign-On URL
- Okta Issuer / Entity ID
- Okta Certificate
Click Save and Continue in JazzHR.
Copy and paste the JazzHR Identifier from JazzHR into Okta. Click Save in Okta.
Assign Users to the JazzHR Application in Okta
Once JazzHR has been added to your Okta Applications page, click on the Assignments tab and assign all people/groups with user profiles in JazzHR.
Before enabling SSO for all users on the JazzHR account, you can test the SSO connection. In JazzHR, click Test Configuration and select Test SSO. You will receive an email with a one-time link to bind your JazzHR login with Okta.
After you have tested and confirmed proper configuration, you can enable it for all users on your account. Please note: the integration will not work for users that are not assigned to the JazzHR Application in Okta. Navigate to Settings and select the People Tab. Click the pencil icon next to Okta SSO and Enable SSO.
All users on the account will receive an email to Login to Okta. Once the user account is configured, you will no longer be able to use your JazzHR email and password to manually log in.
Once the user binds Okta with their JazzHR account, they will be able to SSO freely into JazzHR directly from Okta. Or, by using this link: https://app.jazz.co/app/v2/login?s=sso
Can I opt-users out of SSO?
Yes. If you have an External Recruiter that is not using Okta, you can remove SSO from their profile. Go to Settings>People> Select User. Click Disable SSO on the User's profile. This will trigger an email for the user to set up a password to login to JazzHR.
Can we use SSO and traditional email and password to login?
No. Once Okta is enabled, users will not be able to log into JazzHR using their email and password. You will need to disable SSO from their account.
What happens if I remove SSO from my JazzHR subscription?
If you choose to remove SSO from your JazzHR subscription, you will need to disable the SSO integration from your settings. Go to Settings and select People. Click the trash can icon next to your configured SSO and select Disable SSO.
All users on your account will receive an email from firstname.lastname@example.org to reset their password and log in.
If you do not disable SSO within 24 hours of removing the feature from your account, a member of our Customer Success Manager team will reach out!