In this article, you can find detailed information about the activation and login flows with Single Sing On (SSO) for different type of users (administrators, key contacts, and boardees).
Want to know more about Single Sign-On feature? Check this article.
TABLE OF CONTENTS
- Activation and login flows for (Super) Admin users
- Activation and login flows for Key contacts
- Activation and login flows for Onboardees
Activation and login flows for (Super) Admin users
1. Invitation email
When a Super Admin or an Admin role is assigned to a user, they get an invitation email to access the back-end of the Boarding App:
2. Account activation
To activate their account, the user needs to follow the link from the email. After following this link, the user will be asked to enter their email address:
3. SSO login
After providing their email address and clicking NEXT, the user will be redirected to the company SSO screen:
In some cases, a user might be asked to perform more steps before they can log in (3.1, 3.2, 3.3). These steps, see below, are normally skipped if the domain ownership is configured for a company. See step 4 for optimized SSO activation flow. If you see step 3.1, 3.2 and 3.3 and they are unwanted/unneeded, please contact Talmundo Support.
3.1. Confirmation request
In case it's the first time the user is Logging in using SSO, the system first needs to confirm that they own the SSO account:
3.2. Confirmation email
In their inbox, the user should see below confirmation email with the ‘Confirm’ button:
3.3. Connecting accounts
After clicking the button or the link, the user will be redirected to the confirmation page. The user needs to confirm that they want to connect their external (SSO) user with their Talentech ID user:
4. Admin App Dashboard
After entering the email address (and possibly password, depending if the user is already logged in with SSO internally), the user will be navigated to the Admin Dashboard page:
5. Consequence login
When Single Sign-On (SSO) is enabled, admin users who open an app URL will be automatically redirected to the company’s login screen:
Activation and login flows for Key contacts
1. Invitation email
When a key contact gets their first assignment (e.g., the first task, or they are assigned as a key contact to a boardee for the first time), they get an email for activation of their account. This can be done by different kind of emails, depending on the company processes, but in most cases, it's the 'New tasks' email. When received, the user needs to click on the action link in the email (e.g., 'View my tasks' button):
2. SSO login
After clicking the link, the user will be redirected to the company SSO screen:
3.1 to 3.3. Confirming SSO account and connecting to TalentechID
If the company domain is configured for a company, step 3.1 to 3.3. (see activation and log-in flow for (Super) Admins above) are skipped. If not, the same extra steps will follow before step 4 is reached.
4. My tasks Dashboard
After entering the email address (and possibly password, depending if the user is already logged in with SSO internally), the user will be navigated to the My tasks page:
5. Consequence login
When Single Sign-On (SSO) is enabled, key contacts who open an app URL will be automatically redirected to the company’s login screen:
Activation and login flows for Onboardees
When SSO is enabled for Onboardees, there is a differentiation between activation/log in before their first working day and on or after their first working day.
Activation and login flow without SSO – before the 1st day
Before their start day, onboardees will be using their personal email addresses and their manually created passwords to log in to the Onboarding app
1. Invitation email
When an onboardee is added to the platform, they get an invitation email:
2. Account activation
To activate their account, the onboardee needs to follow the link from the email. After following this link, the onboardee will be asked to complete the invitation by creating their password:
3. Onboarding app dashboard
After creating the password and accepting the Privacy Policy, the onboardee will be automatically logged in and navigated to the Onboarding App:
Activation and log in flow for with SSO – from the 1st day on
Starting from the start day, onboardees will be automatically switched to SSO accounts.
4. Login on (or after) the start day
When an onboardee accesses the Onboarding app on their first day on the job (or after), they will land on the ‘Sign in’ page. Firstly, they need to provide their email address (work or personal email address):
5. SSO login
After entering their email address and clicking Next, the onboardee will be redirected to the company SSO screen. Here they can only fill in their WORK email address:
5.1 to 5.3. Confirming SSO account and connecting to TalentechID
If the company domain is configured for a company, step 5.1 to 5.3. (see step 3.1 to 3.3 activation and log-in flow for (Super) Admins above) are skipped. If not, the same extra steps will follow before Onboardees reach step 6.
6. Onboarding app dashboard
After entering their work email address (and possibly password, depending if the onboardee is already logged in with SSO internally), the onboardee will be navigated to the Onboarding app dashboard:
