Modern single sign-on with OpenID Connect
With JobTek Professional, connect Microsoft Entra ID, Okta, Google Workspace or any OpenID Connect identity provider, and your team signs in to JobTek with their company account.
What is OpenID Connect?
OpenID Connect, often shortened to OIDC, is an open standard that lets one system confirm who someone is to another. It's the language your identity provider and JobTek use to talk to each other when someone signs in, and it's used by most modern cloud identity providers.
It's built on OAuth 2.0, short for Open Authorization, the standard behind the Continue with Google and Continue with Microsoft buttons across the web. OpenID Connect adds the piece that matters for sign-in: a digitally signed confirmation of exactly who the person is.
What happens when someone signs in
- 1Off to your provider
The person enters their work email in JobTek and is sent to your identity provider's sign-in page.
- 2Your provider checks them
Your provider asks for their password, multi-factor prompt or anything else your policies require.
- 3A signed ID token comes back
Your provider sends JobTek an ID token: a short, digitally signed message saying who the person is.
- 4JobTek checks it and lets them in
JobTek checks the token's signature and details, matches it to the right person, and signs them in.
Every sign-in, checked thoroughly
Signature verified
Every ID token is checked against your provider's published signing keys, so it can't be forged.
Right issuer and audience
JobTek confirms the token came from your provider and was issued for your JobTek connection, not another app.
Fresh every time
Expiry times and a one-time nonce stop old or copied tokens from being reused.
Protected in transit
Sign-in state is encrypted and signed, and your client secret is stored encrypted.
The terms explained
OIDC
OpenID Connect, the open standard for confirming who someone is during sign-in.
OAuth 2.0
Open Authorization, the standard OpenID Connect is built on, designed so apps can work together without sharing passwords.
ID token
The digitally signed message your provider sends after sign-in, confirming who the person is and when they signed in.
Issuer and audience
Who created the ID token, and which app it was meant for. JobTek checks both, so a token made for another app is refused.
Nonce
A number used once. JobTek puts a fresh one into every sign-in and expects it back, so a copied token can't be replayed.
Client ID and client secret
The name and password your identity provider gives JobTek, so the two can recognise each other. JobTek stores the secret encrypted.
Claims
The details inside an ID token, such as email address and name. You choose which claims JobTek uses.
Connecting your provider
- 1Register
Create an app registration for JobTek in your identity provider.
- 2Enter details
Add your provider's address, client ID and client secret in JobTek's company settings.
- 3Map claims
Choose which claims carry each person's email address, name and identifier.
- 4Go live
Add your email domains, test a sign-in, then require company sign-in if you wish.
Questions about OpenID Connect
Which plan includes it?
JobTek Professional.
Which providers support it?
Microsoft Entra ID, Okta, Google Workspace and most modern identity providers.
Should we choose OpenID Connect or SAML?
If your provider supports both, OpenID Connect is usually simpler to set up. Both are equally secure in JobTek.
Connect your provider today
Start a free JobTek Professional trial and set up OpenID Connect in minutes.