Configure Single Sign-On (SSO)

Single sign-on (SSO) allows users of your Folks to log in to the platform using their existing business credentials, simplifying access while strengthening security.

Settings in Folks

In the left menu, select Settings > Security.

Make sure you are on the Single Sign-On (SSO) tab, then click Activate.

Fill in the following fields:

• Company code: you can choose this freely as long as it is not already taken

• Identity Provider: Google Workspace or Microsoft.

Configuration with Microsoft

1. Sign in to the Azure portal.
2. Go to Enterprise applications.
3. Click New application, then Create your own application.
4. Name your application Folks and click Create.
5. Once the application has been added, set up single sign-on by selecting the SAML method, then click Edit.
   👉 For more information, see the documentation SAML configuration for Microsoft Azure.

6. In the first section (Basic SAML Configuration), fill in the following fields:
   Identifier (Entity ID):
   https://api.folkshr.app/auth/sp/your_company_code/
   Reply URL (Assertion Consumer Service):

   https://api.folkshr.app/api/v2/authorization/sso/respond/your_company_code
   (Replace your_company_code with the name you previously defined in Folks under Settings > Security.)

7. Click Save.

8. In the third section (SAML Certificates), download the Federation Metadata XML file.

9. Return to Folks, upload the XML file in the designated area (Identity Provider), then click Finish.

Configuration with Google Workspace

1. Navigate to the Google Admin Portal.
2. Select Apps.
3. Click Web and mobile apps. Select Add custom SAML app from the drop-down Add App menu.
4. Name your application Folks and upload an App icon. Then click Continue.
5. In the Google IdP Information screen, click Next.
6. In the Service Provider Details screen, enter the following information and click Next :
   • ACS URL: https://api.folkshr.app/api/v2/authorization/sso/respond/your_company_code
     your_company_code refers to the company name to be defined in Folks, which can be edited in Folks under Settings > Integrations > SSO
   • Entity ID: https://api.folkshr.app/auth/sp/your_company_code
7. In the Attribute Mapping screen, click Add New Mapping.
8. Set the Primary email to email.
9. Make sure that the Service Status Button is on.
10. Return to Folks, upload the XML file in the designated area (Identity Provider), then click Finish.

User login

When a user accesses the Folks login page, they will see a new button allowing them to log in via Single Sign-On (SSO). They will need to enter the company code you provided to complete the login process.

Require SSO Login

To enhance security, you can require all users to sign in using only SSO:

• Simply turn on the toggle for Require SSO login for all users.

⚠️ Important: When this option is enabled, the standard login method (manually entering an email address and password) is no longer available. Therefore it is important to ensure that all your users have a professional email address linked to Microsoft or Google.