Setting up integrations & SSO (overview)

This article is for IT and system admins preparing to set up integrations, apps, and single sign-on (SSO) in Simployer One. It's part of phase 4 of onboarding and gives a starting point before diving into the detailed setup guides linked below.

Note: Some of the linked setup guides require a user account in Simployer One to complete configuration.

What is Single Sign-On (SSO) and how does Simployer One support it?

Single Sign-On (SSO) lets a user log in once with one username and password to access multiple applications, without re-entering credentials each time (unless specific security rules require it). SSO is a concept, not a specific technology.

Simployer One supports SSO through the SAML 2.0 protocol. You're using SSO via SAML 2.0 when you log in to Simployer One through:

• Google Workspace
• Azure AD
• Okta

Note: The "Sign in with Google" button is a social login, not SSO via SAML.

How does Simployer One integrate with Okta?

Okta is an enterprise identity management service that connects people to applications across cloud and on-premises environments, letting IT manage employee access centrally.

Simployer One offers a ready-made Okta app that keeps HR and IT systems in sync. When employee or profile data is updated in Simployer One, those updates automatically flow to connected IT systems. This supports automated user lifecycle management across both SaaS and on-premises applications, including directories such as Microsoft Active Directory.

Using Simployer One as the source of employee data in Okta is known as HR as a Source (HRaaS).

What is SCIM and how does Simployer One use it?

SCIM (System for Cross-domain Identity Management) is a standard for managing user identities across cloud applications. It provides a common user schema and protocol so that moving users into, out of, and around cloud systems is simpler and cheaper to manage.

SCIM works with a Client and Server model:

• The Client is typically an identity provider (IdP) that holds all user information and acts as the source of truth.
• The Server is typically a connected service provider, such as Slack, HubSpot, or Gmail.

Simployer One can act as either the Client or the Server in a SCIM setup, but Simployer support recommends setting Simployer One up as the Client.

What is Simployer One's API?

An API (Application Programming Interface) defines how two software applications communicate — including the requests that can be made, how to make them, and the data format used.

Simployer One's API is a RESTful API that follows the OpenAPI 3.0.0 specification (previously known as Swagger).