Single Sign-On (SSO) is an authentication process that allows users to access multiple applications with a single set of login credentials. HackerRank for Work supports SSO to provide a seamless login experience and is particularly suited for larger teams. This integration simplifies access management by reducing the need to handle multiple credentials.

Prerequisites

• You must have Company Admin access.

• Your organization has an Enterprise plan with HackerRank.

Steps to enable SSO

1. Access SSO Settings: Navigate to the top right-hand side of the landing page, click on the down arrow under profile, and select Settings, followed by Single Sign-On.

2. Configure SSO:

• Copy the SSO Unique ID and add it to your Identity Provider (IDP) app (e.g., Okta, OneLogin). 

  1. Use the IDP app to generate a metadata XML file.

  2. Click Upload Metadata in HRW and upload the XML file. Once uploaded, a metadata URL will be displayed.

3. Enable SSO:

• Test the SSO setup by copying the generated URL and opening it in an incognito browser window. You should be redirected to your IDP sign-in page. Sign in and verify that you are returned to HackerRank.

• Once verified, click Enable SSO to enforce SSO for all users in your organization. Going forward, all users will be required to sign in via your IDP's login page.

4. Disable SSO (Optional):

• If needed, you can disable SSO at any time by clicking the Disable SSO button, which is highlighted in red.

SSO endpoints

• Entity ID (Metadata URL):
  https://www.hackerrank.com/x/api/v1/sso/saml/[company_unique_id]/metadata

• ACS/Reply URL:
  https://www.hackerrank.com/x/api/v1/sso/saml/[company_unique_id]/acs

• Sign-on URL:
  https://hackerrank.com/work/home

• Logout URL:
  https://www.hackerrank.com/x/api/v1/sso/saml/[company_unique_id]/logout

For example, if your company's unique ID is fj0iolfc03n:

• Metadata URL: https://www.hackerrank.com/x/api/v1/sso/saml/fj0iolfc03n/metadata

• ACS URL: https://www.hackerrank.com/x/api/v1/sso/saml/fj0iolfc03n/acs

Updating certificates

Your IdP metadata includes a security certificate. When a certificate expires, upload a new metadata file to the HackerRank SSO Page.

To avoid disruptions, upload a metadata file that includes both the current and the new certificates before the existing one expires. In this case:

• The old certificate remains valid until it expires.

• The new certificate takes effect automatically after you update it in the IdP, and the old certificate expires.

This process ensures that users remain logged in and prevents unexpected login failures.