This document provides instructions to integrate BambooHR with UPSSO based on the SAML protocol

PREREQUISITES

  1. Administrator access to the BambooHR portal.

  2. Administrator access to UPSSO portal.

DOWNLOADING THE IDP CERTIFICATE

  1. Login into UPSSO portal as administrator

  2. Click on the “IDP Resources” on the left side Navigation Menu and then “DOWNLOAD IDP “ file.

  3. A file named “server.crt” will be downloaded. Keep this file as we need this later.


CONFIGURING UPSSO SAML IN BambooHR

  1. Sign in to BambooHR Site Administration and go to Settings.

  2. Click on Apps and go to SAML Single Sign-On

  3. Click Install button.

3. In SAML Single Sign - On Settings enter the details

SSO login URL -https://<YOUR_UPSSO_DOMAIN_NAME>/upsso/upsso-service

Certificate -copy and paste Certificate which we downloaded from step 2 above.

4.Click Save button

CONFIGURING BAMBOOHR APPLICATION IN UPSSO

  1. Login into the UPSSO portal as an administrator.

  2. Click on the “Application Management” menu and then click new record button and select SAML application as highlighted below.

3.Click on BambooHR application icon.

4.Enter the BambooHR domain name of your company .Click on the Save button.

TESTING THE INTEGRATION

  1. Make sure to logout from BambooHR.

  2. Login into the UPSSO portal as a user having the same email address as a BambooHR user.

  3. Click on the BambooHR Application.

  4. Select the OTP method and enter the OTP and click on the Verify button.

5.Users will be able to access the BambooHR application

How to ByPass SSO:

BambooHR does not provide any bypass SSO log-in URL . The admin should always go through the SSO.A BambooHR admin can disable SAML by uninstalling the SAML application in BambooHR to allow username and password sign in.