About Indeed Employer Single Sign-On (SSO)

SSO helps you manage account access in a simple and secure way. Employees use their company login to sign in to Indeed. This can bypass two-factor authentication (2FA) and government ID checks. SSO helps reduce login problems and improve security. It can also remove access for former employees automatically.

• Better security: Employees use trusted work credentials.
• Easy access: No extra usernames or passwords to remember.
• Less work for admins: It's simple to add and manage users, especially when many employees join or leave.
• Simplify access control: Get employees the right permissions in a few steps.

Step 1: Contact Indeed support

You can contact us by chat, phone, or message.

Step 2: Eligibility check

We'll confirm if SSO is available and a good fit for your company.

Step 3: Pre-implementation meeting (30 minutes)

We review technical details, plan next steps, and schedule the implementation.

Step 4: Implementation meeting (30–60 minutes)

We complete the setup and prepare for launch. Some employers may use a self-paced setup instead.

How SSO works 

We support SP-initiated SSO by default. IdP-initiated SSO is also available if needed.

Supported protocols 

SAML and OIDC (SCIM is not supported.)

Testing before launch 

We can test SSO with a small group of users before going live.

Domain Enforcement adds security by limiting access to approved company e-mail addresses. Users must have an approved e-mail domain (like @yourcompany.com, or approvedagency.com) in order to access your employer organization on Indeed.

Follow these steps to enable Domain Enforcement:

1. Go to your Employer Settings
2. Select Edit and add any additional approved domains that you want to allow. 
3. Select Next: set up policies and toggle on domain enforcement for the domains listed.
4. Then select Done.