Steps to configure SAML SSO for enableHR

About enableHR

enableHR is a cloud-based human resources (HR) and work health and safety management platform. Its main aim is to help businesses streamline people processes, enforce compliance with employment and safety laws, and reduce the HR team's administrative burden.

The following steps will help you enable SSO for enableHR software from Identity360.

Prerequisites

1. The MFA and SSO license for Identity360 is required to enable SSO for enterprise applications.
2. Log in to Identity360 as an Admin, Super Admin, or Technician with a role that has Application Integration and Single Sign-on permissions.
3. Navigate to Applications > Application Integration > Create New Application and select enableHR from the applications displayed.
   Note: You can also find enableHR using the search bar located at the top.
4. On the General Settings tab, enter the Application Name and Description.
5. Under Choose Capabilities, select Single Sign-on and click Continue.
   General Settings of SSO configuration for enableHR.
6. On the Integration Settings tab, navigate to Single Sign On and click IdP Details. Copy the Login URL, Logout URL, and Metadata values, which will be used later during the configuration in enableHR.
   Integration Settings of SSO configuration for enableHR.

enableHR (service provider) configuration steps

1. Log in to enableHR, the service provider (SP), as an administrator.
2. Click Settings > Account Settings.
3. Click Security > SSO.
4. Leave the Identity Provider (IdP) field blank.
5. Check the Enable SAML Identity Provider box.
6. In the SAML Identity Provider field, paste the Metadata value copied in step 6 of the prerequisites.
7. Select the appropriate Authentication Mode. If you intend to manage users and their roles within enableHR, set it to AuthenticationOnly mode. If you intend to use Access (Authorization) mode, please contact enableHR.
8. Set New User Access to ESS – eSS Employee as that is the safest option recommended by enableHR.
9. In the Login URL field, paste the Login URL value copied in step 6 of the prerequisites.
10. In the Logout URL field, paste the Logout URL value copied in step 6 of the prerequisites.
11. Click Update.

Identity360 (identity provider) configuration steps

1. Switch to the application configuration page of Identity360, the identity provider (IdP).
2. Enter the Relay State parameter, if necessary.
   Note: The Relay State is an optional parameter used with a SAML message to remember where you were or to direct you to a specific page after logging in.
3. Click Save.
   Integration Settings of SSO configuration for enableHR.
4. To learn how to assign users or groups to one or more applications, refer to this page.

Your users will now be able to sign in to enableHR through the Identity360 portal.