SSO Setup for Google Suite (GSuite)

SAML Single Sign-On (SSO) enables users to use one set of login credentials to access multiple applications, such as Bullhorn and Email. This article will outline the steps for configuring SSO for Google Suite (GSuite). If you're looking to configure a different SSO provider, see the SSO Setup Instructions page.

Steps

  1. Log in to Google Admin.
  2. Choose Add a service/App to your domain or click the plus (+) icon in the bottom corner.
  3. Select Apps and then SAML apps.
  4. Select Setup my own custom SAML App. The Google IDP Information window opens with the Single Sign-On URL and the Entity ID URL fields populated.
  5. Collect the service provider setup information.
  6. Provide this information to Bullhorn Support by submitting a ticket. The ticket must include one of the two following pieces of information:
    • An XML download of the IDP metadata.
    • A copy of the Entity ID and the Single Sign-On URL values, as well as a download of the X.509 Certificate.
  7. Select Next.
  8. In the Basic Application Information window add an application name and description, then select Next.
    • (Optional) Click Choose file to upload a PNG or GIF file to serve as an icon. The file size should be 256 pixels square.
  9. In the Service Provider Details window, enter:
    • Entity ID: http://www.bullhornstaffing.com
    • For S Release:
      • ACS URL: https://www.bullhornstaffing.com/BullhornStaffing/SAML/Login.cfm
      • Start URL: https://www.bullhornstaffing.com/BullhornStaffing/SAML/Login.cfm
    • For Bullhorn Novo:
      • ACS URL: https://universal.bullhornstaffing.com/universal-login/login
      • Start URL: https://universal.bullhornstaffing.com/universal-login/login

  10. Leave Signed Responseunchecked.
  11. Select Next.
  12. Select Finish.

Turn on SSO for Your New SAML App

  1. Go to Apps, then click SAML apps.
  2. Select your new SAML app.
  3. At the top of the gray box, click the three vertical dots for More Settings.
  4. Choose one of the following options:
    • ON for everyone to turn on the service for all users (click again to confirm).
    • OFF to turn off the service for all users (click again to confirm).
    • ON for some organizations to change the setting only for some users.
  5. Ensure that your user account email IDs match those in your G Suite domain.
  6. After Bullhorn Support finishes your configuration setup (with the details you provided), create Bullhorn user profiles to enable SSO. Make sure to populate their ATS Name ID.

SSO User Enablement

After setting up your specific provider, SSO must be enabled for each user. You can grant user access individually or in bulk with assistance from Bullhorn Support.

You must be a Bullhorn Administrator to complete these steps.

Single User

Follow these steps to grant user access individually.

  1. Navigate to  Menu > Admin > Users.
  2. Click the Pencil icon to the left of the user to enable.
  3. In the Account Information section, from the Identity Provider drop-down, select your new client provider.
  4. In the new ATS Name ID field that appears, enter the Name ID of the user. Usually, this is their email address.
  5. If the user should also have access to SSO via their mobile device, select the Separate mobile Identity Provider check box.
  6. Click Save.

En Masse

Bullhorn can enable multiple users en masse by using a CSV file provided by you.

  1. Navigate to Menu > Admin > Users.
  2. Click Select an Action > Generate User List.
  3. Change the Format to Excel 2000, then click Generate Report.
  4. Open the downloaded file and edit it to only include users you want enabled.
    • Remove all API users or any that shouldn't have SSO access.
  5. Rename the Login Name column to User.
  6. Delete all other columns.
  7. Click  File > Save As.
  8. Select This PC as the location and change the file type to CSV (Comma delimited) (*.csv).
  9. Click Save.
  10. Send this file to Bullhorn Support.