Skip to content
  • There are no suggestions because the search field is empty.

X.1 - Entire OnHire - Single Sign-On (SSO)

New feature details of Single Sign-On (SSO) in version X.1 of the Entire OnHire application.

Content

Introduction
How Single Sign-On (SSO) Works?
Scenario 1: When you are already authenticated with SSO on your device
Scenario 2: When you authenticate for the first time with SSO on your device
Scenario 3: When you are not authenticated with SSO on your device

Introduction

The Single Sign-On (SSO) feature enables users to access the Staff Portal using their existing Google, Microsoft, or LinkedIn credentials, streamlining the authentication process and enhancing security.

SSO aims to reduce password fatigue, enhance the user experience, and strengthen security by centralising authentication and access control. Security policies (such as Multi-Factor Authentication (MFA), user license check access) are enforced through a single identity provider.

How Single Sign-On (SSO) Works?

You can access the Staff Portal directly by clicking the Google, Microsoft, or LinkedIn button as shown in the figure below.

To ensure a successful SSO login, you must ensure that your email address is registered in the Entire OnHire User Master.

 

Login-1

If Multi-Factor Authentication (MFA) is enabled, the selected MFA method will be applied when your email address is found in the Entire OnHire User Master for external users. To complete the login process, please enter the valid verification code when prompted. When you log in using MFA and select the 'remember me for <number of days> days' option,  a verification code will not be required for the specific browser and device for a predefined period (e.g., 2 or 7 days).  

However, you will still need to verify your identity if you access the system from a different browser or device, if your session expires, if cookies are cleared, or if security settings are updated.

Two-factor authentication

Scenario 1: When you are already authenticated with SSO on your device

If you are already authenticated with Google, Microsoft, or LinkedIn on your device: 

  • On clicking the Google, Microsoft, or LinkedIn button, a 'Sign in to your account' pop-up appears, prompting you to choose your account. Once you select your account,  if your email address is registered in the system, you will be logged in seamlessly

Sign In - google

  • The system validates the email against the Entire OnHire User Master, and after successful login, the system retrieves the authenticated session

Entire OnHire Users-3

What are the Possible Reasons for Login Access Denied into your System?

The following are possible reasons you may be unable to log in to the Entire OnHire system:

  • If the email address is not registered in the Entire OnHire User Master, access to the system will be denied, and a validation message will appear: 'There is no account linked with the email address jo**@xeo**e.com. Please contact your administrator'

EmailDoesNotExist

  • If multiple email addresses are associated with the same Login ID in the Entire OnHire User Master, SSO login will not be permitted. An access denied message will be displayed, please contact your administrator for assistance

Access Denies

  • If the maximum number of active licensed users is exceeded, the User License Limit Reached message is displayed as 'The system has reached its maximum number of active licensed users limit. Please check with your IT to proceed further or request us for new licenses.'

User License Limit Reached

Scenario 2: When you authenticate for the first time with SSO on your device

    • When you select your account for the first time (by clicking Google, Microsoft, or LinkedIn), a 'Let this app access your info?' pop-up appears after providing your valid credentials. Click Accept to grant permission to access your information, or click Deny to exit without granting access

    • If your email address is registered in Entire OnHire, clicking Accept will log you in seamlessly

    Single Sign On - Microsoft-New2-1

    Scenario 3: When you are not authenticated with SSO on your device

    If you are not authenticated with Google, Microsoft, or LinkedIn on your device: 

    • You will be redirected to the standard authentication login process for the chosen provider (Google, Microsoft, or LinkedIn)

      Single Sign On - Microsoft1 Single Sign On - Microsoft2
    • After successfully authenticating your account, the system validates the email address registered in the Entire OnHire User Master.  If the email address exists in the Entire OnHire, you will be logged in seamlessly

     

    Back to Top

    Related Articles: 

    X.1 Release Notes - August 2025
    X.1 - Enhancements in Workforce App
    X.1 - Enhancements in Staff Portal
    X.1 - Enhancements in Finance Portal
    X.1 - Resolved Issues