Overview

The Organization Settings area of the HR360Hub portal lets administrators configure how the portal is set up and branded for their organization. It is reached from Portal Settings in the left sidebar and groups related configuration pages into a single menu: General Settings, Organization Chart, Branding, Theme Customizer, SMTP Setting, AI Settings, and SSO Login Settings.

This guide covers SSO Login Settings. Single Sign-On (SSO) allows users to sign into HR360 Hub with an account from their organization’s identity provider, instead of entering a separate email and password. The portal supports two providers:

• Google Workspace: Users sign in with their Google account.
• Microsoft 365 / Azure AD: Users sign in with their Microsoft account.

📜 Note:  Only one SSO configuration can be enabled at a time. Enabling one provider automatically disables the other.

This guide covers:

• How to access SSO Login Settings from the left sidebar.
• Understanding the SSO Login Settings listing page and its columns.
• How to add an SSO configuration for Google Workspace, Microsoft 365 / Azure AD.
• How to set up a Microsoft Entra organization and find the Tenant ID, with a step-by-step workflow.
• How to edit an existing SSO configuration and enable or disable it.
• How users sign in to the portal with an enabled SSO provider.

Prerequisites

Before configuring SSO, ensure the following are in place:

• The user must be logged in with a role that has permission to update Portal Settings in the Portal Settings module of Roles & Permissions.
• The organization’s email domain (for example, company.com) must be known, as it is entered as the Authorized Domain.
• For Microsoft 365 / Azure AD, an organization must exist in Microsoft Entra with the domain verified, and the Tenant ID must be available. See Section 3.3.
• Every user who will sign in with SSO must have an account in HR360 Hub that matches their account in the SSO provider. See Section 3.
  

Section 1: Accessing SSO Login Settings

After logging in to HR360 Hub, follow the steps below to open SSO Login Settings.

1. From the left sidebar, click on Portal Settings to expand the sub-menu.
2. The sub-menu displays Org Setting, Desktop App, Attendance, Leave Management, License Type, Recruitment, Evaluation Cycle, and Email Templates.
3. Click on Org Setting to open Organization Settings.

The Organization Settings page displays a menu on the left with the following options: General Settings, Organization Chart, Branding, Theme Customizer, SMTP Setting, AI Settings, and SSO Login Settings. Click on SSO Login Settings to open the SSO listing page.

Section 2: SSO Login Settings Listing Page

The SSO Login Settings page lists every SSO configuration created for the organization, along with its SSO status (Enabled or Disabled). When no provider has been configured yet, the listing displays a No data available message.

Once a provider is configured, it appears as a row in the listing. The example below shows Google Workspace (Disabled) and Microsoft 365 / Azure AD (Enabled) configured for the same domain.

2.1. Listing Table Columns

2.2. Page Controls

• Items per page selector: Controls the number of records displayed per page.
• Refresh icon: Reload the listing to reflect the latest changes.
• + Add SSO Configuration button: Opens the Add SSO Configuration dialog to set up a new provider.
• Pagination controls: Navigate between pages using the arrows at the bottom of the listing. The footer shows the range of entries displayed.

💡 Tip:  Use the Status badge on the listing to quickly confirm which provider is currently enabled for sign-in.

Section 3: Adding an SSO Configuration

To set up a new provider, click the + Add SSO Configuration button on the listing page. The Add SSO Configuration dialog opens, where you select a provider and enter its details.

📜 Note:  If a provider is already configured, its option is greyed out in the Add SSO Configuration dialog and shows “Already configured”. For example, if Google Workspace is already configured, the Google Workspace option cannot be selected when you click + Add SSO Configuration. 

3.1. Common Elements

The following elements appear in the Add SSO Configuration dialog. Fields that are specific to a provider are described in Sections 3.2 and 3.3.

​3.2. Google Workspace

Select Google Workspace (Sign in with Google).

Enter the Authorized Domain, then choose whether to enable SSO.

⚠️ Warning:  The user account in the configured Google Workspace and the user account in HR360 Hub must be the same for SSO login to succeed. If the user’s account is disabled, does not exist, or belongs to a different domain, the user will not be able to log in.

3.3. Microsoft 365 / Azure AD

Select Microsoft365 / Azure AD (Sign in with Microsoft). This provider requires a Tenant ID and an Authorized Domain to set up the SSO configuration.

The How to set up Microsoft 365 / Azure AD panel lists the steps to find the Tenant ID:

1. Open the Microsoft Entra admin center to log in. [Open Microsoft Entra admin center]​
2. Search Tenant Properties in the header search bar and click on it.
3. Copy the Tenant ID.
4. Paste it in the Tenant ID field in the HR360 Hub SSO configuration form.

3.3.1. Setting Up the Organization and Domain

Before copying the Tenant ID, the organization and its domain must be ready in Microsoft Entra. Complete these steps first, as they are done outside HR360 Hub:

1. Create the organization (tenant) in Microsoft Entra, if your company does not already have one.
2. Add your company domain. In the Microsoft Entra admin center, go to Entra ID → Domain names → Add custom domain, enter the domain (for example, company.com), and click Add domain.
3. Verify the domain. Microsoft shows a DNS record (TXT or MX) for the domain. Add this record at your domain registrar or DNS provider, then return to Microsoft Entra and click Verify.
4. Add users with the same domain as the HR360 Hub domain, so that each user’s Microsoft account matches their HR360 Hub account.

📜 Note:  DNS changes can take an hour or more to take effect, so verification may not succeed immediately. A domain that is already verified in another Microsoft directory cannot be verified again until it is removed from that directory. If the domain is already verified on Microsoft, then step 2 and 3 are not needed.

⚠️ Important:  The user account in Microsoft Entra and the user account in HR360 Hub must use the same domain for SSO login to succeed. If the user’s account does not exist or the domain is different, the user will not be able to log in.

3.3.2. Getting the Tenant ID

Once the organization and domain are set up, copy the Tenant ID:

1. In your browser, go to Microsoft Entra admin center and sign in to the Microsoft Entra admin center.
2. In the header search bar, search for Tenant Properties and click on it. The Properties page opens.
3. Locate the Tenant ID field and click the copy icon next to it to copy the Tenant ID.

3.3.3. Microsoft SSO Workflow

The diagram below summarizes the complete process, from creating the organization in Microsoft Entra to a user signing in to HR360 Hub.

1. Create an organization on Microsoft Entra.
2. Verify the domain.
3. Add users with the same domain as HR360 Hub. The domain must be the same.
4. After setting up the organization, search Tenant Properties and copy the Tenant ID.
5. In HR360 Hub, log in and navigate to the SSO settings using the path Dashboard → Portal Settings → Org Setting → SSO Login Settings → + Add SSO Configuration
6. Paste the copied Tenant ID and the Authorized Domain in the Add SSO Configuration dialog, turn on the Enable SSO toggle, and click Save Configuration.
7. The user logs in to HR360 Hub using the Microsoft button on the login page, without entering an email address or password.

3.4. Saving the Configuration

1. Complete all required fields (marked with a red asterisk) for the selected provider.
2. Turn on the Enable SSO toggle if users should be able to sign in with this provider immediately. Leave it off to save the configuration without enabling it.
3. Click Save Configuration to create the SSO configuration. It appears in the listing.

Click Cancel to close the dialog without saving.

⚠️ Warning:  Only one SSO configuration can be enabled at a time. Enabling a new configuration disables the one that is currently enabled. See Section 4.4 for details.

Section 4: Editing an SSO Configuration

To update an existing configuration, click the Edit (pencil) icon in the Actions column of the listing. The Edit SSO Configuration dialog opens with the saved values filled in. A configuration cannot be deleted; use this dialog to edit its details or to enable or disable it.

4.1. What Can Be Changed

The Edit dialog displays a message confirming which provider the configuration uses, for example “SSO is already configured with Google Workspace. You can update its settings, but the provider can’t be changed.” The other provider cards are greyed out and cannot be selected.

4.2. Editing Google Workspace

4.3. Editing Microsoft 365 /Azure AD

Click Update Configuration to save your changes, or Cancel to close the dialog without saving.

4.4. Enabling or Disabling a Configuration

Only one SSO configuration can be enabled at a time. When you turn on the Enable SSO toggle for a provider while the other provider is already enabled, a warning appears below the toggle. It names the provider that will be disabled when you save, for example “Only one SSO configuration can be enabled at a time. Saving will disable the currently enabled Microsoft 365 / Azure AD configuration.”

1. Click the Edit (pencil) icon for the provider you want to enable or disable.
2. Turn the Enable SSO toggle on to enable the provider, or off to disable it. When enabling, review the warning to confirm which provider will be disabled.
3. Click Update Configuration. The Status badge in the listing updates to Enabled or Disabled.

⚠️ Important:  Saving an enabled configuration automatically disables the provider that was previously enabled. Make sure users are informed before switching providers, as they will sign in with the newly enabled provider.

Section 5: Signing In with SSO

Once an SSO configuration is enabled, users can sign in from the HR360 Hub login page. Users do not need to enter an email address and password. They can log in using the continue with buttons for the SSO configuration that is enabled for the organization and then selecting their user account.

To sign in with SSO:

1. Open the HR360 Hub login page.
2. Under or continue with, click the button for the SSO provider enabled for your organization: Google Workspace or Microsoft 365.
3. An account selection screen appears. Select the account you want to sign in with.
   
4. After you select the account, you are signed in to HR360 Hub.

5.1. Selecting a Google Account

When you click Google Workspace, Google displays the Choose an account screen, with the message "to continue to" followed by the HR360 Hub address. Select the account you want to sign in with, and you are logged in. If the account you need is not listed, click Use another account.

5.2. Selecting a Microsoft Account

When you click on Microsoft 365, Microsoft displays the Pick an Account screen. It lists the Microsoft accounts available on your device. Select the account you want to sign in with, and you are logged in. If the account you need is not listed, click Use Another Account

💡 Tip: In some cases, if your organization has not allowed the app or requires approval for it, users will see the Approval required screen. Contact your administrator to approve the app. The users can then try signing in again.

📜 Note:  Users whose email address belongs to the Authorized Domain configured for the enabled provider are sent to that provider to sign in. The user’s account must exist in HR360 Hub, be active, and use the same domain; otherwise the user cannot log in.

Summary

The following table provides a complete step-by-step summary of all key workflows in SSO Login Settings: