Select your platform and then browse by platform category

Who are you and what section are you in?

Sign in using Single sign-on (SSO)

Available for the following HR plan: Platinum
Available for the following user access level: Employee    

Single Sign-on (SSO) allows you to use one set of login credentials to access multiple applications. With SSO, you can sign in to Employment Hero using your existing credentials from an identity provider (IdP) like Microsoft Entra, Google, or Okta. This article shows how to sign in using Single Sign-on.

  Interactive learning

Demo: How to sign in with Google via SSO

Sign in using SSO

How to sign in using SSO via Google
  1. Go to the Employment Hero login page using your web browser.
  2. Click the Sign in with SAML SSO button.
    Pre sso sign in
  3. Enter your company email. If you are unsure of your company email address, please refer to the invitation you received from Employment Hero. Single sign on email address.jpg

    Helpful Hint

    If you are already logged in to a Google Account, you can simply click your Google account instead of typing in your email address.

  4. Enter your Google account's email address or phone number.
    sign in to Google
  5. Enter your Google account password.
    Google login screen with next highlighted
  6. Depending on your company's IdP's security settings, you may also need to complete additional security measures such as two-factor authentication (2FA).
    Google verification
  7. Once you have successfully logged in, you will be redirected back to your Employment Hero homepage. You should now have access to your account.
How to sign in using SSO via Microsoft
  1. Go to the Employment Hero login page using your web browser.
  2. Click the Sign in with SAML SSO button.
    Pre sso sign in
  3. Enter your company email. If you are unsure of your company email address, please refer to the invitation you received from Employment Hero. Single sign on email address.jpg
  4. Enter your Microsoft password to verify your identity.
    microsoft log in sign in.jpg
  5. Once you have successfully logged in, you will be redirected back to your Employment Hero homepage. You should now have access to your account.
How to sign in using SSO via Okta
  1. Go to the Employment Hero login page using your web browser.
  2. Click the Sign in with SAML SSO button.
    Pre sso sign in
  3. Enter your company email. If you are unsure of your company email address, please refer to the invitation you received from Employment Hero. Single sign on email address
  4. Enter your Okta password to verify your identity.
    okta log in with verify
  5. Once you have successfully logged in, you will be redirected back to your Employment Hero homepage. You should now have access to your account.

Use SSO tile from IdP

Sign in with Google SSO tile

Alongside the SSO option above, you can also access your Employment Hero account directly from your Identity Provider (IdP) dashboard using an SSO tile.

This tile allows you to log in directly to Employment Hero from the following IdP platforms: Google Workspace, Microsoft 365, and Okta.

The instructions below explain how to sign in via your Google Workspace Dashboard.

  1. Open your Google account in the Chrome browser.
  2. Click the apps button near the top right corner of your screen.

    Helpful Hint

    You can also access your Google apps by going to your Google Workspace Dashboard. If you choose to use this dashboard, find the Employment Hero app button on the page and click it.

    screenshot of Google page on Google Chrome browser, highlighting apps button

  3. On the drop-down menu, click the Employment Hero app button (you may need to scroll down to find it).
    screenshot of Google page on Google Chrome browser, highlighting Employment Hero button in Google's apps menu
  4. If you see a Choose an account page asking you to specify your email address, click your relevant work email address. alt
  5. You should now be logged in to your Employment Hero platform.
Sign in with Microsoft SSO tile

Alongside the SSO option above, you can also access your Employment Hero account directly from your Identity Provider (IdP) dashboard using an SSO tile.

This tile allows you to log in directly to Employment Hero from the following IdP platforms: Google Workspace, Microsoft 365, and Okta.

The instructions below explain how to sign in via your Microsoft Apps page.

 

  1. Access your Microsoft Apps page. 
  2. Click the Apps button on the main menu.
  3. Click the Employment Hero SSO tile.
    screenshot of Microsoft Apps page, highlighting Employment Hero SSO tile
  4. You should now be logged in to your Employment Hero platform.
Sign in with Okta SSO tile

Alongside the SSO option above, you can also access your Employment Hero account directly from your Identity Provider (IdP) dashboard using an SSO tile.

This tile allows you to log in directly to Employment Hero from the following IdP platforms: Google Workspace, Microsoft 365, and Okta.

The instructions below explain how to sign in via your Okta account's My Apps Dashboard page.

  1. Access your Okta account's My Apps Dashboard page.
  2. Click the EH SSO tile.
    screenshot of Okta My Apps page, highlighting EH SSO tile
  3. You should now be logged in to your Employment Hero platform.

Troubleshooting SSO issues

What should I do if I cannot log in with SSO?

If you are having trouble logging in with SSO, try the following steps:

  • Ensure that you are using the correct company email address linked to your Employment Hero account.
  • Check that you are entering the correct username and password for your IdP.
  • Make sure you have completed any additional security measures required by your IdP, such as two-factor authentication (2FA).

If you still cannot log in, contact your company's admin for further assistance.

What happens if my organisation is no longer on an SSO-supported plan?

If your organisation is no longer on a plan that supports SSO, the feature will be automatically turned off. Administrative or ownership privileges will be informed of this change, and affected users will be notified about the new login process.

Why have I lost the ability to edit my company email?

For security reasons, the ability to update the company email is restricted to Admins and Owners. This prevents potential malicious updates that could result in account access issues.

SSO FAQs

Why do I need to complete 2FA with both my IdP and Employment Hero?

Employment Hero requires 2FA to meet the Australian Taxation Office (ATO) Operational Framework guidelines. Even if you have completed 2FA with your IdP, you will need to complete it again on Employment Hero to ensure compliance with these guidelines.

Can I use any other identity providers apart from Microsoft Entra, Google, or Okta?

Currently, Employment Hero supports SSO through Microsoft Entra, Google, and Okta. More providers will be added in the future.

What should I do if I have multiple Employment Hero accounts across different organisations using the same SSO-enabled email?

Employment Hero will log you into the organisation with the lowest ID by default. To access other accounts, you can:

  • Switch between organisations after logging in.
  • Have SSO disabled in other organisations and log in using your account email and password.
  • Use different company email addresses for different organisations to log in via SSO.
How do I sign in to Swag after Single Sign-on is applied?

Employees can continue using their personal email and password to access Swag. SSO is only required for accessing work-related information and features within the Swag app.

What should I do if I get error code 403: Error: app_not_enabled_for_user?

If you encounter this error from Google, please reach out to your organisation's Admin or IT department. Your email address may not be set up to use Google's SSO.

Was this article helpful?
3 out of 12 found this helpful