Home
Product Guides
Start typing to search…

SAGE HR Integration

This guide helps you integrate Sage HR with Fixiam using SAML-based Single Sign-On (SSO). You’ll start from Fixiam, set up SAML configuration, and connect it to Sage HR.

✅ Prerequisites

Before starting:

  1. You must have admin access to Sage HR and Fixiam.
  2. Ensure users exist in both platforms with matching email addresses.

Step 1: Start Integration in Fixiam

  1. Log into Fixiam.
  2. Go to Applications > Apps.
  3. Click Add New Application.
  4. Choose Custom Application.
  5. Select Configure SSO using SAML.

Step 2: Provide General Application Info

On the General Info screen, provide the following details

  1. Application Name / Label
  2. Upload Logo (Optional)
  3. Show in User Portal (Optional)
  4. Click on Next to continue

Step 3: Generate SAML values

  1. On the Configuration page, Click Export Metadata
  2. This will download but opens a new tab (especially in Chrome).
  3. If a new tab open with the metadata, right-click the page and Save As an .xml file — e.g., seamfix-idp-metadata.xml
  4. Some values from the XML file will be required during the next step.

Step 4: Access the Sage HR Admin Account

After exporting the metadata from Fixiam, follow these steps to set up the SAML connection in Sage HR:

  1. Go to https://sage.hr/signin and sign in to your admin account.
  2. Click on your name at the top right corner and select Settings.
  3. In the settings menu, click Integrations, then choose SAML.
  4. You’ll see fields to fill:
    1. Entity ID
    2. Authentication URL
    3. Key Fingerprint

🧩 Fill in the values:

  • Entity ID: Leave this as sage.hr
  • Authentication URL: Open the metadata XML file you downloaded from Fixiam.
    • /Search for the tag: <SingleSignOnService Location="..."
    • Copy the value inside the Location attribute — that’s your Authentication URL.
    • Paste it into the Authentication URL field in Sage HR.
  • Callback/Reply URL: This is automatically provided by Sage HR on the same SAML setup page. Take note of it — you’ll need to paste this into Fixiam later as the ACS URL.
📌

Remember:

  • You must leave the Entity ID as sage.hr
  • The Callback/Reply URL is the same as the ACS URL needed in Fixiam

Step 5: Get the Key Fingerprint for Sage HR

Sage HR requires a Key Fingerprint, which you will generate from the Public Certificate in Fixiam.

Follow these steps:

  1. Go back to Fixiam, where you're configuring the SAML application.
  2. Locate and copy the full Public Certificate value.
  3. Open this tool in your browser: 🔗 https://www.samltool.com/fingerprint.php
  4. In the input field:
    1. Paste the public certificate as-is.
    2. Select SHA1 as the algorithm.
    3. Click Calculate Fingerprint
  5. Copy the resulting Fingerprint and paste it into the Key Fingerprint field in Sage HR.
  6. In Sage HR, ensure SHA1 is selected as the hashing method.
📌

Tip:

Be sure not to modify the certificate before pasting. Use it exactly as copied from Fixiam.

Step 6: Return to Fixiam to Complete Configuration

Now that Sage HR has provided you with a Callback/Reply URL, you’ll finish setting up the SAML app in Fixiam.

On the Configuration screen in Fixiam:

  • SP Entity ID: Enter sage.hr
  • ACS URL: Paste the Callback/Reply URL copied from Sage HR
  • Audience URL (optional): Leave blank or reuse sage.hr
  • Single Logout URL (optional): Leave blank unless Sage HR provides one
  • Sign Assertion: ✅ Ensure this checkbox is enabled

The Public Certificate field is pre-filled — no changes needed.


Step 6: Set Up Attribute Mapping in Fixiam

To pass user identity info from IAM to Sage HR:

  1. Go to the Attribute Mapping tab in Fixiam.
  2. Click Add Attribute

Use the following values:

Attribute NameFixiam Attribute Name
NameIDEmail

Step 7: Group Assignment and User Setup

You’ll now link the SAML app to a group of users in Fixiam:

  1. In Fixiam, go to Groups
  2. Create a new group (e.g., Sage HR Users)
  3. Assign the Sage HR application to this group
  4. Add users to the group:
    1. Ensure their email addresses match exactly with their Sage HR accounts

Step 8: Group Assignment and User Setup

You're ready to test the full SSO setup.

  1. Go to https://sage.hr/signin
  2. Enter the email address of a user configured in Fixiam and Sage HR
  3. If the setup was successful:
    1. The user will be redirected to Fixiam for authentication
    2. Upon login, they’ll be redirected back and logged into Sage HR

🎉 You’re All Set!

You’ve now successfully integrated Sage HR with Fixiam using SAML SSO. Your users can enjoy secure, seamless logins with centralized identity control.

Updated about 2 months ago