Integration capabilities of 365Talents with Client's SSO
Protocols available
2 protocols are available to integrate 365Talents with Customer's SSO:
OpenID Connect (OIDC) : Full support of the protocol, including :
- Support of the Authorization Code flow
- Configuration of the JWKS URL (if available) or of pre-shared JWKS content (if unavailable)
- Several callback methods (form_post/query/fragment)
- Scope configuration possible
- Capability to restrict connection to specific IP ranges
- Capability to restrict features (e.g. : forbid document download) based on properties provided by the SSO.
SAMLv2
- Metadata configuration
- Support of several certificates in parallel.
- Support of SSO & SLO
- Responses signature , assertions signature & requests signature validation
- Capability to restrict connection to specific IP ranges
- Capability to restrict features (e.g. : forbid document download) based on properties provided by the SSO.
Guide: Configure AD Azure SSO
- In the left panel, go to "Enterprise Application".
.png)

- In the top menu, click on "New application"
.png)

- In the search bar that displays, search "Azure AD SAML Toolkit" and click on it.
.png)

- After clicking, a window will open of the right of the screen:
.png)

- Click on "Create" after having provided the name of your application.
- Search in the left menu for the section "Single Authentication", then select "SAML".
.png)

- In the new page, select "Upload metadata file". It will open a search window for the file.
.png)

- After the file is uploaded, every elements should be filled automatically.
- Send the Metadata file to 365Talents.
.png)

- Add users accordingly.