Azure AD Single Sign-On (SSO) (Entra ID) with Bamboo HR Implementation is a service that enables your employees to access Bamboo HR and other cloud applications with one login and one password. Bamboo HR is a cloud-based human resources software that helps you manage your workforce, track time off, run reports, and more. With Azure AD SSO, you can integrate Bamboo HR with your existing identity provider, such as Azure Active Directory (Entra ID), and simplify the user authentication and authorization process. Azure AD SSO also provides security features such as multi-factor authentication, conditional access, and identity protection to help you protect your data and comply with regulations. There are several benefits you can get using SSO integration: • Improve user productivity and satisfaction by reducing the number of passwords and login screens they have to deal with. • Enhance security and compliance by enforcing consistent policies and controls across all your cloud applications. • Reduce IT costs and complexity by leveraging your existing identity infrastructure and eliminating the need for separate identity solutions for each application. • Gain visibility and insights into your user activity and application usage with Azure AD reports and dashboards. • Flexible options: You can choose to enable Azure AD SSO for all or some of your users, and you can customize the user attributes and claims that are sent to Bamboo HR. • Advanced security: You can enhance the security of your Azure AD SSO with features such as multi-factor authentication, conditional access, and identity protection, which allow you to verify user identity, enforce granular policies, and detect and respond to suspicious activity.

IT Partner responsibilities #

1. Check prerequisites for SSO implementation
2. Create an Enterprise application for the required service
3. Configure this application according to the requirements
4. Configure the required third-party service
5. SSO enabling and testing

Client responsibilities #

1. Coordinate Client resources and staff schedules
2. Provide a dedicated point of contact responsible for working with IT Partner
3. Coordinate any outside vendor resources and schedules
4. Provide administrative access to Microsoft 365 tenant
5. Notify users about new services
6. Review and approve engagement deliverables in a timely manner

Additional cost items not provided by this project #

1. Migration of any data to Azure, such as applications, mail, virtual machines, databases and files (can be purchased as an additional service).
2. Installation of user programs (except for the office suite) on virtual machines (this setting can be is discussed individually).
3. Workstation configuration.

Upon completion of the project, we will provide a project closeout report. This document will indicate the final project status, including acceptance criteria matching, any outstanding issues, and the final budget. If you require more extensive documentation, it can be provided for an additional fee.

Prerequisites #

1. You have administrative access to your company tenant
2. You have administrative access to the service you want to connect to Azure with SSO.
3. A domain name that is verified in Azure AD.

Plan #

The plan may vary depending on your needs.

1. Kickoff meeting
2. Collecting data required for the project
3. Connection to the client’s tenant
4. Connection to the third-party service
5. SSO configuration
6. Verification and fixing issues.

Success Criteria #

1. You have SSO enabled on Azure with the necessary application.
2. Selected users can authorize on the desired service using Entra ID credentials