SSO and provisioning

HireSuite runs one cross-domain identity session across the business site, the hiring app and this help centre, so signing in once carries you everywhere.

How the session travels

The session lives on the shared parent domain and is read by every app's topbar the same way. If a browser is signed into more than one workspace at once, the realm picker in the topbar decides which workspace an action — like opening a ticket here — is attributed to.

Provisioning teammates

New teammates are provisioned through Team settings, not through a separate helpdesk account. Accepting the invite links their identity to the workspace immediately, and support tickets they open automatically carry their workspace and plan context — no separate sign-in step needed.

External identity providers

Enterprise workspaces will be able to connect an external SAML identity provider for their own SSO; until that ships, invited teammates sign in through the shared cross-domain session like everyone else.