Authentication
Sign in the way your organisation already does
Single sign-on through Google Workspace or Microsoft 365, two-factor authentication built in, and administrator controls that decide how the whole organisation authenticates. By enabling SSO you consent to the access described on this page.
At a glance
- Google Workspace and Microsoft 365 single sign-on
- Two-factor authentication with authenticator app support
- Organisation-wide policies set by administrators
- Access revocable at any time, from three places
Two identity providers
Connect the directory you already run. Recruitly authenticates against it and inherits the security policies you have already set there.
Google Workspace
Connect your Recruitly account to Google Workspace for simplified access.
- Verify identity using Google authentication
- Access basic profile information (name, email, profile picture)
- Match your Google Workspace identity with your Recruitly account
- Automatic user provisioning based on your Google directory
Microsoft 365
Connect your Microsoft identity for enterprise-grade security and simplified access.
- Authenticate users through Microsoft's identity platform
- Access basic profile information from your Microsoft account
- Respect and inherit Microsoft's security policies
- Synchronise with your Azure AD for user management
Two-factor authentication
Native authenticator app
Built-in authenticator app verification using Google Authenticator, Microsoft Authenticator or any compatible app.
More methods via SSO
Where SSO is enabled, choose between an authenticator app, SMS or email verification. Organisation-wide 2FA policies are configured by administrators.
Recovery options
Backup codes are provided for emergency access scenarios, so a lost device does not become a lockout.
What you are consenting to
By enabling SSO integration you expressly acknowledge and consent to the following.
Content access
Recruitly will have the ability to access certain content from your Google Workspace or Microsoft 365 account as necessary to provide the Service.
What that covers
Calendar data for scheduling features, contact information for candidate management, and document metadata for recruitment-related materials.
Scope
Access is limited to the minimum necessary permissions required to deliver the functionality you have enabled.
Governed by
All data access is conducted in accordance with our Privacy Policy and Data Processing Agreement.
How the authentication itself is protected
The mechanics underneath single sign-on, and what we do and do not hold.
Administrator controls
Organisation policy
- Enable or disable SSO for the entire organisation
- Force SSO as the only authentication method
- Configure domain-based auto-provisioning
Users and sessions
- Enforce 2FA requirements for all users
- Monitor authentication activity through detailed logs
- Set custom session timeout policies
Requirements, and how to revoke
What SSO needs in order to work, and the three ways to switch it off again.
Technical requirements
A supported web browser with cookies and JavaScript enabled, a valid Google Workspace or Microsoft 365 subscription, network access to the authentication endpoints, a compatible mobile device for authenticator apps if using 2FA, and the appropriate permissions for the administrator configuring SSO.
Revoke from the provider
Through your Google or Microsoft account security settings.
Revoke from Recruitly
Using the Recruitly administrator controls.
Revoke through support
By contacting our support team.
What happens then
Revoking SSO access reverts affected users to password-based authentication, and may prevent them signing in until alternative credentials are established.
Questions about SSO and authentication?
Security reviews, identity-provider specifics and organisation-wide policy questions all go to the same place, and get a real answer.