Available for the following HR plan: Platinum
Available for the following user access level: Employee
Single Sign-on (SSO) allows you to use one set of login credentials to access multiple applications. With SSO, you can sign in to Employment Hero using your existing credentials from an identity provider (IdP) like Microsoft Entra, Google, or Okta. This article shows how to sign in using Single Sign-on.
Interactive learning
Sign in using SSO
- Go to the Employment Hero login page using your web browser.
- Click the Sign in with SAML SSO button.
-
Enter your company email. If you are unsure of your company email address, please refer to the invitation you received from Employment Hero.
Helpful Hint
If you are already logged in to a Google Account, you can simply click your Google account instead of typing in your email address.
- Enter your Google account's email address or phone number.
- Enter your Google account password.
- Depending on your company's IdP's security settings, you may also need to complete additional security measures such as two-factor authentication (2FA).
- Once you have successfully logged in, you will be redirected back to your Employment Hero homepage. You should now have access to your account.
- Go to the Employment Hero login page using your web browser.
- Click the Sign in with SAML SSO button.
- Enter your company email. If you are unsure of your company email address, please refer to the invitation you received from Employment Hero.
- Enter your Microsoft password to verify your identity.
- Once you have successfully logged in, you will be redirected back to your Employment Hero homepage. You should now have access to your account.
- Go to the Employment Hero login page using your web browser.
- Click the Sign in with SAML SSO button.
- Enter your company email. If you are unsure of your company email address, please refer to the invitation you received from Employment Hero.
- Enter your Okta password to verify your identity.
- Once you have successfully logged in, you will be redirected back to your Employment Hero homepage. You should now have access to your account.
Use SSO tile from IdP
Alongside the SSO option above, you can also access your Employment Hero account directly from your Identity Provider (IdP) dashboard using an SSO tile.
This tile allows you to log in directly to Employment Hero from the following IdP platforms: Google Workspace, Microsoft 365, and Okta.
The instructions below explain how to sign in via your Google Workspace Dashboard.
- Open your Google account in the Chrome browser.
- Click the apps button near the top right corner of your screen.
Helpful Hint
You can also access your Google apps by going to your Google Workspace Dashboard. If you choose to use this dashboard, find the Employment Hero app button on the page and click it.
- On the drop-down menu, click the Employment Hero app button (you may need to scroll down to find it).
- If you see a Choose an account page asking you to specify your email address, click your relevant work email address.
- You should now be logged in to your Employment Hero platform.
Alongside the SSO option above, you can also access your Employment Hero account directly from your Identity Provider (IdP) dashboard using an SSO tile.
This tile allows you to log in directly to Employment Hero from the following IdP platforms: Google Workspace, Microsoft 365, and Okta.
The instructions below explain how to sign in via your Microsoft Apps page.
- Access your Microsoft Apps page.
- Click the Apps button on the main menu.
- Click the Employment Hero SSO tile.
- You should now be logged in to your Employment Hero platform.
Alongside the SSO option above, you can also access your Employment Hero account directly from your Identity Provider (IdP) dashboard using an SSO tile.
This tile allows you to log in directly to Employment Hero from the following IdP platforms: Google Workspace, Microsoft 365, and Okta.
The instructions below explain how to sign in via your Okta account's My Apps Dashboard page.
- Access your Okta account's My Apps Dashboard page.
- Click the EH SSO tile.
- You should now be logged in to your Employment Hero platform.
Troubleshooting SSO issues
If you are having trouble logging in with SSO, try the following steps:
- Ensure that you are using the correct company email address linked to your Employment Hero account.
- Check that you are entering the correct username and password for your IdP.
- Make sure you have completed any additional security measures required by your IdP, such as two-factor authentication (2FA).
If you still cannot log in, contact your company's admin for further assistance.
If your organisation is no longer on a plan that supports SSO, the feature will be automatically turned off. Administrative or ownership privileges will be informed of this change, and affected users will be notified about the new login process.
For security reasons, the ability to update the company email is restricted to Admins and Owners. This prevents potential malicious updates that could result in account access issues.
SSO FAQs
Employment Hero requires 2FA to meet the Australian Taxation Office (ATO) Operational Framework guidelines. Even if you have completed 2FA with your IdP, you will need to complete it again on Employment Hero to ensure compliance with these guidelines.
Currently, Employment Hero supports SSO through Microsoft Entra, Google, and Okta. More providers will be added in the future.
Employment Hero will log you into the organisation with the lowest ID by default. To access other accounts, you can:
- Switch between organisations after logging in.
- Have SSO disabled in other organisations and log in using your account email and password.
- Use different company email addresses for different organisations to log in via SSO.
Employees can continue using their personal email and password to access Swag. SSO is only required for accessing work-related information and features within the Swag app.
If you encounter this error from Google, please reach out to your organisation's Admin or IT department. Your email address may not be set up to use Google's SSO.