Candidate Sign In Using Third-Party Credentials

Candidates can log into their Career Section account (candidate profile) using third-party credentials such as Google.

It is a Taleo best practice to activate this feature, especially in external Career Sections, because it is a great time-saver for candidates.

If the third-party credentials are not linked to a candidate profile in the Taleo customer's Career Sections, the system verifies if the email address from the third-party application is an email address or user name in a candidate profile in the customer's Career Sections.

If no duplicate email address is found, the system creates a candidate profile in the Career Section automatically, using the email address (from the third-party login process) as the user name and generating a password that conforms to the security policies configured for the Career Section. If a security question was enabled for candidate profiles, the candidate is asked to provide this information.

If a duplicate email address is found in a candidate profile, the system displays the login page from which candidates can log into their account in the Career Section. Candidates select one of two options:

If candidates select "Yes, I have a Candidate Profile and I would like to associate it to my single sign-on", the third-party account credentials are linked to the candidate profile in the Career Section. This option enables candidates to later sign into the Career Section directly (provided the candidates selected "Keep me logged in" or similar setting in the third-party product) by simply clicking the third-party icon on the Career Section.
Candidates can choose to create a candidate profile. Thereafter, the third-party account credentials are linked to the new candidate profile in the Career Section and the candidates can sign into the Career Section directly (provided the candidates selected "Keep me logged in" or similar setting in the third-party product) by simply clicking the third-party icon on the Career Section.

If a security question was enabled for candidate profiles, the candidate is asked to provide this information.

When signing into a Taleo customer's Career Section using third-party credentials, candidates must indicate their acceptance or refusal of a legal agreement stating that they are responsible for logging out of the third-party solution after they have finished. Logging out of third-party solutions when finished is particularly important when candidates are using a public computer. If candidates accept the legal agreement, their acknowledgment is recorded in the database. If they decline the agreement, the career section Sign-In page is displayed anew. The text of the legal agreement cannot be configured.

Configuration

Display the OpenID Option can be set at the global level and at the career section level for external and internal career sections. If the Career Section Sign-on property Allow new users to register in the system is set to No, then it is recommended that the Display the OpenID Option for the career section also be disabled.

Note: For this solution to work, the Career Section must not be configured for single sign-on (SSO), which usually only affects Internal Career Sections. If SSO is turned on for a Career Section, then the property Display the OpenID Option must be disabled or the candidate will receive error messages.

Setting	Location
Display the OpenID Option	Configuration > [Career Section] Administration > [Global Security] Internal Career Sections > [Sign In] Edit
Display the OpenID Option	Configuration > [Career Section] Administration > [Global Security] External Career Sections > [Sign In] Edit
Display the OpenID Option	Configuration > [Career Section] Administration > Career Sections > [Name] > Sign In > Edit

Separate sets of labels are available for customers who want a single sign-on (SSO) login page for internal users and an SSO login page with third-party login options for external users. Taleo customers should contact their customer executive if they wish to have separate text for each type of candidate.

Table TexTool Labels for External and Internal Career Sections Using SSO

Default Label	TexTool ID - External SSO	TexTool ID - Internal SSO
Welcome to the Candidate Profile Single Log-in Configuration	2418132	355212
Our records indicate that your email address is already linked to a candidate profile in our system. Please enter the username and password for the existing account, which will link your two accounts together and allow you to view your existing candidate profile.	2419711	2412630
Candidate Profile Creation	2416824	355086
Please specify a user name and password below. You can use this username and password in the future to access any of the {0} candidate portals. This username and password can also be used as a backup measure, in case your single log-in service provider is down. We suggest you use the same login information as for your SSO connection.	2416761	355083

Table TexTool Labels for Third-party Credentials (in Career Sections Using SSO)

Default Label	TexTool ID
Yes, I have a Candidate Profile and I would like to associate it to my single log-in.	355203
No, I don't have a Candidate Profile, but I would like to create one now.	355200