Skip to main content

How to configure Rippling?

K
Written by Karthek S
Updated over 2 weeks ago

Table of contents

Step 1: Log in to Rippling and Create a New SAML App

Step 2: RH Custom SSO App Integration

Step 3: Upload XML Metadata to Right Hand Portal

Step 4: Test SSO

Troubleshoot

Step 1: Log in to Rippling and Create a New SAML App

You're setting up the RH_SSO_App in Rippling to enable Single Sign-On (SSO) support for this application.

  1. Log in as an admin and then on the left navigation menu, select IT → Third-Party access.

2. Click the Add Integration button, then select Create New Custom Integration.

Step 2: RH Custom SSO App Integration

  1. Enter a descriptive name for the app (e.g., RightHandSSO), choose 'Security' as the category, and upload a logo file. Ensure the 'Single Sign-On (SAML)' option is selected, then click Continue.

  2. Select the first option to confirm that you are the admin and will handle the installation yourself, then click Next.

  3. The SSO XML file contains Rippling’s SAML configuration details, including its login URL, public certificate, and more. You’ll need to upload this file to the RightHand portal so it can recognize and validate SAML responses from Rippling.

    Scroll down and Download Idp Metadata XML file → Save it for later use.

  4. Next, scroll down and enter the ACS URL and SP Entity ID provided by the RightHand portal.

    You can find the URL by following the steps below:

    In the Right-Hand portal, navigate to Settings from the left-hand menu, then open the Integrations tab. Click Add New, copy the SSO Sign-In URL, and paste it into both the ACS URL and SP Entity ID fields. Then click Next.
    ​

  5. This step determines which users in your organization can access the app via SSO.

    For example, you can restrict access to specific departments, job titles, or individual users.

    Choose your desired settings/rule. (Right-Hand Suggests Recommended Settings)

  6. This controls when SSO access becomes active for a new employee.

    Select when users get access (e.g., after signing offer letter). (Right-Hand Suggests Recommended Settings)

  7. Optionally, you can allow Rippling full admins to sign in via SSO as well. This is a convenience feature that supports centralized access management.

    Configure SSO for Admins if required → Continue.

  8. Click Continue and leave the Group Attribute setting as is; we’ll configure attribute mapping later. Click Continue again, then return to the integration setup.

    Configure SAML attribute mapping to specify which user information is passed from Rippling to RightHand. Without this, RightHand won’t be able to identify the user or retrieve their email or name during login.

    Navigate to Settings → SAML Attributes → Create New → select Global Attribute. Set the value to email with the user's email address, then click Save.

    Step: 3 Upload XML Metadata to Right Hand Portal

    1. Return to the Right-Hand portal and click Settings from the left-hand menu. Go to the Integrations tab and click Add New. Under IdP, select Add Another IDP Integration. Enter 'Rippling SSO' as the Entra IdP Integration Name. Then click Browse, upload the Federation Metadata XML file, and click Save.

    Step: 4 Test SSO

    1. Go directly to the RightHand login page to initiate the SSO login flow.

    2. Click Single Sign-On (SSO), enter your email address, and log in.

    Troubleshoot

    If you see the error below, go to the RH custom app → Employee status → click Grant access to the user.

Did this answer your question?