Single Sign-On (SSO) allows Folks ATS users to log in to the platform using their existing work credentials, making access simpler while increasing security.
Enable the Feature in Folks ATS
In the left menu, select Parameters > Module Configuration.
Click the Single Sign-On (SSO) button and click Enable.
-
Fill in the following fields:
Company code: you can choose any code as long as it is not already taken.
Authentication provider: Google Workspace or Microsoft.
Configuration with Microsoft
Log in to the Azure portal.
Go to Enterprise Applications.
Click New application, then Create your own application.
Name your application Folks ATS and click Create.
Once the application is added, set up Single Sign-On by selecting the SAML method, then click Edit.
👉 For more information, see the SAML configuration for Microsoft Azure documentation.-
In the first section (Basic SAML Configuration), fill in the following fields:
Identifier (Entity ID):
https://folksats.app/authorization/sp/[company code]Reply URL (Assertion Consumer Service):
https://folksats.app/authorization/sso/respond/[company code]
(Replace [company code] with the name previously defined in Folks ATS under Parameters > Module Configuration, Single Sign-On SSO button).
Click Save.
In the third section (SAML Certificates), download the federation metadata XML file.
Go back to Folks ATS, upload the XML file in the designated spot (identity provider), then click Finish.
Configuration with Google
Go to the Google Admin portal.
Select Apps.
Click Web and mobile apps, then Add App > Add custom SAML app.
Name your application Folks ATS, add an icon if desired, then click Continue.
On the Google IdP Information screen, click Next.
-
On the Service Provider Details screen, enter the following information, then click Next:
ACS URL:
https://folksats.app/authorization/sso/respond/[company code]Entity ID:
https://folksats.app/authorization/sso/respond/[company code]
(The company code is the one defined in Folks under Parameters > Module Configuration, Single Sign-On SSO button).
On the Attribute Mapping screen, click Add New Mapping and map the primary email address to the email field.
Make sure the Service Status button is enabled.
Download the federation metadata XML file.
Go back to Folks ATS, upload the XML file in the designated spot (identity provider), then click Finish.
User Login
When a user goes to the Folks ATS login page, they will see a new button allowing them to log in via Single Sign-On. They will need to enter the company code you provided to them to complete the login.
Require SSO Login
To increase security, you can require SSO for all users:
Simply enable the Require SSO login for all users button.
⚠️When this option is enabled, the standard login (manual entry of email address and password) is no longer available. Therefore, it is important to make sure that all your users have a work email address linked to Microsoft or Google.