Talentech ID - User flow when using SSO

This document describes what the user experience is when using Single Sign On.

When SSO is enabled in Talentech ID, users will be redirected to their organization’s login page to enter their credentials, instead of using their credentials in Talentech ID.

If you are using Talent Recruiter, Talent Manager or Talent Onboarding, the login URL that should be used is the same URL as before.

SSO Login Flow

Go to https://start.talentech.io

 

You will then be redirected to your organization’s login page. Here you will sign in using your organization credentials.

 

If you’ve logged in using your organization’s SSO before, then you will be redirected back to the original app (i.e. Talent Recruiter, Talent Onboarding etc). If not, see the section below.

If this is the first time you’re logging in using SSO

If this is the first time you’re logging in using SSO, we first need to confirm that you own both the Talentech ID account and the SSO account. When redirected back to Talentech ID you will be told to check your email.

 

In your inbox you should see an email that looks similar to this:

 

Click the button or the link in the email and you’ll be taken to a confirmation page in Talentech ID. Here you must confirm that you want to connect your SSO login with your Talentech ID account.

 

Once confirmed, you can click the link to log in. You will be taken through the normal login flow.

Enabling support for non-SSO users

In some cases, customers want to allow external users to be able to log in without using the SSO setup. If this is the case, we can enable an additional ‘Talentech account’ login method. Users will then be asked to choose which login method to use, either the SSO option or the 'Talentech account' option.

 

The user will then be shown the following page, where they can select the login method they want to use.

If the user selects the Talentech ID account option, they will be shown the following page where they can enter their Talentech ID password. If they select the SSO option instead, they will be sent through their organization’s SSO login page (see the previous section).