You want to provide the most seamless experience for your clients possible, and it can get annoying if they have to constantly log in to different systems. So we’ve now added single sign-on capability, so when you provide your services to them, it can be integrated with the software they’re already using and they can transition from their system to yours with no extra steps—and no need for you to manually set up dozens (or thousands!) of users.
How single sign-on can make your work easier and win you more clients
One of our CRAs used single sign-on to be able to bring on one of the largest employers in the state of Oregon as a client. Rather than managing individual users and keeping track of granting and revoking access, they used SSO to link their InstaScreen background screening software directly to the university’s system so it could happen automatically. This saved the CRA and their client a huge amount of time and work, and it was the deciding factor that allowed them to land their client (and the over 33,000 jobs they support).
How it works
When someone in your system tries to access Instascreen, our system (the service provider) will ask the system you want to use the login from (the identity provider) if they are allowed access. The identity provider will send us back the username for that person from your system, and then one of three things can happen, depending on your preference.
1. Give all users in your system access to Instascreen automatically
The most seamless option is to have Instascreen automatically create accounts for each user who connects through single sign-on based on the default basic user settings you have chosen. This way everyone will be able to get access without any extra work, and you can later edit any individual’s permissions to be able to give them even more abilities if you want to.
2. Only allow specific users to log in with single sign-on
If you don’t want to give everyone access, our system can check to see if the username sent to us matches an existing Instascreen account you’ve already set up before granting them access. This way you can make sure you have complete control and can keep access as restricted as you need to while still making things as easy as possible for your clients and users.
3. Advanced: Send back yes or no responses from the identity provider
Want the benefits of creating accounts automatically but don’t want to give everyone in the system access? With a little bit more setup on your side, you can authenticate who should or shouldn’t have access to Instascreen before their information is returned to us. That way, you can send back a positive response containing their username only if they should have Instascreen access, and we can automatically create accounts only for the people you choose.
How to get started
The best part about this is how fast and easy it is to set up. We work directly with you to configure how the service provider (TazWorks Instascreen) and the identity provider (the system you want to use the login credentials from) connect. Using SAML 2.0, we make sure these two systems talk to each other securely to exchange information while keeping all your data totally safe.
Contact support today at integrations@tazworks.com or 801-572-7401 to learn how you can configure single sign-on for users within your company or for your clients.
