Establish SSO / SAML for your team

Who is this article for?
🗣️ Researchers with admin permissions
⭐️ Available for Recruit essential, Recruit custom, and all Hub clients as an add-on feature

Single-Sign-On SAML is available for Recruit essential, Recruit custom, and all Hub clients as an add-on feature. If you have SSO included in your subscription, the feature will be enabled on your team account and available for you in the My Teams tab. Below, you’ll find instructions for establishing SSO. 

Note: Once you’ve enabled SSO, your team will only be able to log in via SSO. Please contact us if you'd like us to disable SSO, allowing you to login using your password.

How to set up SSO for your team

1. Make sure your team has purchased our SSO feature. If you need confirmation, please email plans@userinterviews.com. 
2. Login to User Interviews, open the left-hand navigation bar, and click on Team Settings. 
3. Click on Advanced Options and scroll down until you see the SAML configuration area.
4. Visit your SAML / identity provider and use our info (“ACSURL” and “EntityID”) to create an app for User Interviews with that provider. 
5. You'll get "Certificate", "Entity ID", and "URL" from the SAML provider you visited above (eg. Okta, OneLogin, G-Suite, etc.). Please enter these details back on the SAML User Interviews page. Note: “Certificate” is a large block of text, while “Entity ID” and “URL” are both one line.

FAQ

I’m supposed to have access to SSO but I don’t see this option available. What should I do?

If you believe your team should have access to SSO and do not see this option available, please contact our Customer Success team.

I set up SAML, and now I can’t log in!

If SAML is incorrectly set up, you’ll be unable to login and UI will need to disable SSO for your team so you can log in via your password and try setup again. If this happens, please contact projects@userinterviews.com for technical assistance.

I need to have multiple teams all using SAML. How does the setup process differ in this case? 

If you need to set up multiple teams all using SAML, we require that you set up a unique SAML application per team. 

Many SAML providers (including Google) use the same Entity ID for an organization, so we’ll need more information to ensure we know which team to assign new people to when they come through SAML. Therefore, please set up each application with the values:

• Entity ID: https://www.userinterviews.com/saml/metadata?team_id=<team_id>
• ACS URL: https://www.userinterviews.com/saml/consume?team_id=<team_id>
• Where `<team_id>` is replaced with the id for the respective team.

Can I use a sign-on URL?

We do not support having a ‘sign-on URL’ specifically. In some cases, including in Azure, including a sign-on URL will break the flow and cause an error.