Employee access management was never meant to become an HR problem. But in fast-moving, globally distributed companies, it often becomes one. New hires need accounts instantly, departing employees need access removed just as fast, and when login issues or compliance questions come up, HR is often the team left chasing answers.
With Atlas HXM, HR teams can now set up Single Sign-On (SSO) directly within the platform, supporting both Okta and Google Workspace, and without relying on IT to manage every change. Secure access, simpler onboarding, and better control, built for modern global teams.
What Is SSO and Why Does It Matter for EOR Teams?
Single Sign-On (SSO) lets your employees access Atlas HXM using the credentials they already use at work, through identity providers like Microsoft Entra ID, Okta, or Google Workspace. Instead of maintaining a separate Atlas HXM password, employees log in once through your company's trusted system and access is granted automatically.
For teams managing employees across multiple countries or through an Employer of Record (EOR), this creates a single, consistent layer of access control, regardless of where your people sit.
Atlas HXM never stores a separate password. That means there's less to manage, fewer reset requests landing on your desk, and fewer opportunities for something to go wrong.
Set It Up Yourself, in Minutes
Previously, configuring SSO required raising a support ticket and waiting for IT involvement. With Atlas HXM, HR teams can now enable SSO directly within the platform in minutes, without relying on technical support or complex configuration cycles:
Go to Settings → Security → SSO inside Atlas HXM
Upload your identity provider's XML metadata file
Test the connection and switch it on
That's it. No IT involvement required. Most teams are up and running in under 20 minutes.
What This Means for Your Team
Faster, safer onboarding: New hires log in from day one using their existing company credentials. No extra account setup, no additional passwords, no early friction.
Instant offboarding: When someone leaves, removing them from your identity provider — Microsoft, Okta, or Google — immediately revokes their Atlas HXM access. One action. No manual cleanup. No risk window.
Self-serve access recovery: If an employee gets locked out while traveling, they reset their credentials through your company's existing system, the same way they would for email. HR never has to intervene.
Audit-ready access control: Every Atlas HXM login is authenticated through your identity provider, creating a clear and provable access trail. When a compliance question comes up, you can answer it in minutes.
Organization-wide coverage: SSO is enforced at the organization level. Every employee across every entity and country, authenticates through the same identity provider. One policy, no exceptions.
Secure SSO Without Paying for an Enterprise Tier
Unlike competing platforms that reserve SSO for enterprise-tier customers, Atlas HXM includes self-serve SSO as standard across all plans, giving HR teams secure, streamlined employee access from day one.
Enterprise-grade security shouldn't come with added complexity or require a larger contract. For lean HR teams managing growing global workforces, it should simply be built into the platform.
Frequently Asked Questions
What is self-serve SSO?
Self-serve SSO allows HR teams to configure Single Sign-On directly within Atlas HXM, without needing IT support or raising a support ticket. Employees log in using existing company credentials from providers like Microsoft, Okta, or Google.
Does Atlas HXM store our employees' passwords?
No. Atlas HXM never stores a separate password. All authentication happens through your identity provider, so there are no additional credentials to manage or protect.
What happens to Atlas HXM access when an employee leaves?
As soon as a user is removed from your identity provider, their Atlas HXM access is instantly and automatically revoked. There is no manual cleanup required.
Is SSO available on all Atlas HXM plans?
Yes. Self-serve SSO is included as standard across all Atlas HXM plans, with no upgrade required.
Which identity providers does Atlas HXM support?
Atlas HXM currently supports Microsoft Entra ID (Azure AD), Okta, and Google Workspace (via SAML). A native one-click Google OIDC integration is coming in a future release.
