Setting up SSO (Single Sign-On) Guide for Administrators

Single Sign-On (SSO) allows candidates to access TASK™ using their organization credentials (e.g., from your LMS or internal user directory). 

Important: The account creation process is the same as when not using SSO. Candidates still need to create a TASK account. What changes is that once the account is created, they won’t need to use their TASK password and can log in more easily via your organization’s login platform.

SSO Options

When implementing SSO, your organization can choose between two strategies:

1. Enforced SSO
   • Mandatory for all users.
   • Candidates cannot log in using their TASK email/password.
2. Proposed SSO
   • Candidates can choose to log in via TASK credentials or via your organization’s credentials.

Unique SSO Link

Once SSO is configured, a unique link can be provided to automatically redirect candidates to your organization’s login platform, bypassing the TASK login page.

• Format example: https://task.sulitest.org/?sso&domain=yourdomain.edu

SSO setup process

1. Contact your TASK Account Manager to schedule a setup meeting between Sulitest’s technical team and your organization’s IT team.
2. During the meeting, your IT team should provide the following SAML2 metadata:
   • Entity ID
   • Login URL
   • Logout URL
   • Signing Certificate
   • A test account on the organization’s login platform
3. Validation
   • The Sulitest team will configure SSO and validate it using the test account.
   • Once successful, candidates can log in via the organization credentials.

Candidate experience

1. Account creation
   • Candidates still create a TASK account as usual. They will provide basic account info: first name, last name, and password.
     • This ensures data collection for research/analytics and provides a fallback if their organization credentials are unavailable.
2. Logging in
   • Candidates can log in using the SSO link or via the login page.
3. Accessing sessions
   • Candidates already invited to TASK → Sessions will appear automatically.
   • Candidates not invited yet → They must enter a session code to access a session.

Candidates can find instructions here.