Skip to content

doyoubuzz/sso

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

28 Commits
 
 
 
 
 
 

Repository files navigation

DoYouBuzz Single Sign-On (SSO)

The SSO connection for DoYouBuzz Campus and DoYouBuzz Showcase allow you to connect your resume database application to your own system (intranet, extranet, etc.). All user roles (user, manager or administrator) can use the login, however, only the user role can be created with the SSO.

Activate the SSO in your Company settings

Go to the SSO settings page. Then, generate a new key and enter the URL on your system that will handle the SSO.

SSO Settings

Configure the external id of the groups

If you want to link the user to a specific group (or groups) in DoYouBuzz Showcase / Campus, you need to edit the group on DoYouBuzz Showcase / Campus as an admin, and set the "external id". The "external id" is the id of the group in your system (it can be a numeric or alphanumric value).

Group external ID

The process

The SSO follow these different steps:

  • You direct you visitor on the page https://showcase.doyoubuzz.com/p/fr/your-company/sso (don't forget to add the "cid" parameter in URL, if multiple URL mode is activated : https://showcase.doyoubuzz.com/p/fr/your-company/sso?cid=mycid)
  • The visitor is automatically redirected on the URL you configured earlier with a timestamp parameter (it will be used for security purpose)
  • This page must check if the user is logged in into your system. In this case, you must redirect this user to a specific URL with a few parameters (this URL is given on the SSO settings page), it looks like https://showcase.doyoubuzz.com/p/fr/your-company/sso
  • DoYouBuzz checks these parameters. If they are valid, several cases are possible :
  • The user has alreeady been authenticated on DoYouBuzz through your SSO: in this case, he is automaticlaly connected to his DoYouBuzz account
  • If he hasn't been authenticated previously through the SSO, he is asked to join your database with his DoYouBuzz account (he can use either an existing DoYouBuzz account or create a new account).

Please note it may take up to 10 minutes before the user appears in your user list.

Parameters to send to the SSO URL:

When your redirect the user on the SSO URL, you must also send a few GET parameters. In the end, the URL will look like

https://showcase.doyoubuzz.com/p/fr/your-company/sso?cid=mycid&email=kara.thrace%40doyoubuzz.com&external_id=kara-thrace&firstname=Kara&groups[]=pilote&groups[]=viper&user_type=1&hash=653e88ecb79d1a29aa1ed6bf8529d382&lastname=Thrace&timestamp=1349192825&target=user:12

Of course, all the data need to be "url encoded".

email (required)

The email of your user on your system

external_id (required)

The id of your user on your system. It can be a numeric or alphanumeric value

timestamp (required)

This is the timestamp given earlier by the SSO page as a GET parameter. You just need to send it again to the SSO page as a security measure.

firstname (optional)

Firstname of your user

lastname (optional)

Lastname of your user

groups[] (optional)

The id of the groups on your system that your user will join. Please note that these ids must be configured in DoYouBuzz Showcase / Campus.

If you have several groups, you can use &groups[]=group-1&groups[]=group-2

user_type (optional)

On DoYouBuzz Showcase, you can configure up to 3 types of users (candidate, consultant and other). You can use the SSO to create a specific user type or to update a user with a specific type. Default (no parameter given) is the user_type 1.

This parameter does not concern managers or administrators.

target (optional)

After the SSO login, you can redirect the user to a specific CV or User using the target parameter.

If you want to redirect the user to an other User profile, use target=user:ID where ID is the ID of the target User.

If you want to redirect the user to specific CV, use target=cv:ID where ID is the ID of the target CV.

This parameter is not used in the hash generation

hash (required)

The hash parameter is a md5 of the concatenation of email, firstname, lastname, external_id, groups, timestamp and the secretkey.

In PHP: $hash = md5($email . $firstname . $lastname . $external_id . $group . $user_type . $timestamp . $secretkey);

Please note : the group parameter is a concatenation of the differents groups. For example if your Kara Thrace belongs to the groups 'pilot' and 'viper' the $group variable above will be 'pilotviper'

About

SSO connection for DoYouBuzz Campus and DoYouBuzz Showcase

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Contributors 4

  •  
  •  
  •  
  •  

Languages