I use PingOne for SSO. How do I enable the integration with Greenhouse?

* Please note that SSO is not available for organizations in Greenhouse on our basic subscription tier.

  1. Go to My Applications in your PingOne dashboard. Search the Application Catalog for "Greenhouse".
  2. Select “Greenhouse.io” from the Catalog list and fill out your SSO information
  3. Change ${customer.domain} with your company specific subdomain in the top 3 fields (ACS URL, Entity ID, Target Resource). You do not need to upload any metadata or certificates. You also do not need to fill in any fields that aren't pre populated.
  4. On this page, the values under the "Identity Bridge Attribute or Literal Value" MUST match exactly what's in that screenshot. The fields get pre-populated with values that look like "SCIM.something.FirstName", but those are wrong. They should read exactly "Email", "First Name", and "Last Name".
  5.  Click Save & Publish to complete the configuration for PingOne. 

 

Greenhouse will complete the configuration and coordinate with you to determine exactly when SSO should be enabled for your organization. It's important that this launch is carefully timed, because you'll need to instruct users about the change. See note below: 

* All users MUST log in through PingOne once we enable SSO. Users will not be able to log in via the normal Greenhouse login screen anymore, even if they already have passwords.

* Your users will access Greenhouse via the custom URL, which will use the company subdomain that you entered (i.e. https://my-company.greenhouse.io). Right now, your team is using https://app.greenhouse.io. Once SSO is fully-enabled, your users can access Greenhouse through either the custom subdomain (https://my-company.greenhouse.io) or through https://app.greenhouse.io.

* If a new user has a PingOne account but not a Greenhouse account, Greenhouse will automatically create a Greenhouse user account the first time they log in via PingOne. They'll be created with Basic permissions. Administrators can still invite users and change permissions in Greenhouse using our existing screens. 

* Data will be unaffected. Your users will still have access to all of their existing jobs, scorecards, interviews, etc. PingOne only changes the way people log in.

 

Have more questions? Submit a request

Comments

Powered by Zendesk