Enterprise single sign-on with SAML 2.0
With JobTek Professional, connect your SAML 2.0 identity provider so your team signs in to JobTek through the platform your business already trusts.
What is SAML?
SAML stands for Security Assertion Markup Language. Despite the long name, the idea is simple: it's a well-established open standard that lets your identity provider vouch for your staff when they sign in to other apps. It has been the backbone of enterprise single sign-on for many years, and it's supported by platforms such as Microsoft Entra ID, Okta and many directories run on a company's own servers.
The word assertion is the key. When someone signs in, your identity provider makes an assertion, a formal statement that says this person is who they claim to be, and signs it with its own digital certificate, like a wax seal on a letter. JobTek checks that seal before letting anyone in.
What happens when someone signs in
- 1Off to your provider
The person enters their work email in JobTek and is sent to your identity provider.
- 2Your provider checks them
Your provider confirms who they are using your own sign-in policies.
- 3A signed assertion comes back
Your provider sends JobTek a signed assertion confirming the person's identity.
- 4JobTek checks the seal
JobTek verifies the signature against the certificate you registered, and signs them in only if it matches.
Built for enterprise identity teams
Signed assertions
Every response is checked against the signing certificate you provide, so it can't be forged or altered.
Certificate rotation
Register more than one signing certificate, so you can roll over to a new one without downtime.
Protected relay state
The sign-in journey is encrypted and signed, so it can't be tampered with on the way back.
Attribute mapping
Choose which attributes carry each person's email address, name and identifier.
The terms explained
SAML 2.0
Security Assertion Markup Language, version 2.0. The established open standard for enterprise single sign-on.
Assertion
The signed statement your identity provider sends to JobTek, confirming who has signed in.
Signing certificate
The digital seal your identity provider uses to sign each assertion. You give JobTek its public half, so JobTek can check every signature.
Entity ID
The unique name that identifies your identity provider, so JobTek knows exactly which provider it's talking to.
Relay state
A note that travels with the sign-in, so the person lands back in the right place. JobTek encrypts and signs it.
Attributes
The details inside an assertion, such as email address and name. You choose which ones JobTek uses.
Connecting your provider
- 1Create an application
Add JobTek as a SAML application in your identity provider.
- 2Enter details
Add your provider's entity ID, single sign-on address and signing certificate in JobTek's company settings.
- 3Map attributes
Choose the attributes for email address, name and identifier.
- 4Go live
Add your email domains, test a sign-in, then require company sign-in if you wish.
Questions about SAML
Which plan includes it?
JobTek Professional.
Can we rotate our signing certificate?
Yes. Add the new certificate alongside the old one, switch over in your provider, then remove the old certificate.
Can we add SCIM as well?
Yes. SCIM provisioning works alongside SAML and OpenID Connect.
Bring SAML sign-in to JobTek
Start a free JobTek Professional trial and connect your SAML identity provider.