Single Sign-On, or SSO is a commonly used and virtually necessary method of electronically authenticating a user across multiple, distinct applications or systems. Radancy recommends all clients use SSO for user authentication in all Talent Acquisition Cloud customer-facing applications. Once integrated, Single Sign-On (SSO) enables users to access Radancy applications using their existing network credentials, eliminating the need for separate login information.
There are three roles in an SSO implementation:
- The Identity Provider (IdP): An identity provider is a service that stores and verifies a user identity. IdPs are typically cloud-hosted services. In the context of the Radancy Talent Acquisition Cloud, the IdP is managed by the customer.
- The Service Provider (SP): A service provider is a federation partner that provides services to the user. In the context of the Radancy Talent Acquisition Cloud, the Service Provider is the Radancy application the user wants to access.
- The User: This is the user of the application. The user's data is transferred between the IdP and the SP.
Radancy supports the SAML 2.0 protocol for SSO. When a user wants to log in to a Talent Acquisition Cloud application, a SAML request is generated either by the SP (e.g when a user goes to the URL for one of the Talent Acquisition Cloud applications) or by the IdP (when a user clicks on a link from within their company's internal portal). Typically the user is then brought to a login screen in the IdP. After logging in the IdP sends a SAMLResponse to the SP letting it know if the user has properly authenticated. The SP processes that request and allows the user to access the application.
SSO can be used for either accessing applications in the Radancy Talent Acquisition Cloud or accessing an internal mobility career site. If a user wants to access a Radancy application, the user must first be provisioned in the Radancy Platform by Radancy Customer Support and given the proper permissions to access the application. For SSO access to an internal career site, your Identity Provider (IdP) must include a RelayState that identifies the internal site URL where the user should be directed after authentication. Radancy does not use a default RelayState for internal site SSO.
Implementation Process
For Employee Referrals SSO setup, visit this page.
For Hiring Events SSO setup, visit this page.
To implement SSO, the Identity Provider and the Service provider need to share their SAML Metadata. SAML metadata is an XML document that contains information necessary for interaction with SAML-enabled identity and service providers. The document contains URLs of endpoints, information about supported bindings, identifiers, and public keys.
You can find Radancy's metadata here:
- US Hosted: https://login.radancy.net/support/metadata
- EU Hosted: https://login.radancy.eu/support/metadata
The service provider and identity provider each need to configure their systems to recognize the metadata of the other system. Once the metadata is implemented on both sides, a user with a valid NameID is required to test the implementation to confirm that it is working as expected.
Please check out our Frequently Asked Questions article for more information.