Target audience: IT Teams & System Administrators
Overview
To ensure seamless navigation and access control for your institutional community, your IT service must select and configure the primary authentication method for the platform. The chosen method defines how current students, alumni, and administrators authenticate, log in, and maintain their user profiles on the JobTeaser platform.
Option 1: Open access (unrestricted registration)
Under the Open access authentication method, no domain restrictions or centralized single sign-on connections are enforced:
How it works: any user can sign up for the JobTeaser platform using any personal or professional email address (e.g., @gmail.com, @university.edu).
Profile verification: users manually their password during registration.
Best suited for: Institutions seeking immediate, low-effort setup, open community portals, or transitional periods before deploying centralized identity management.
Option 2: Email domain restriction
This method limits account creation to users who hold an official university email address:
How it works: students register using their institutional email domain (e.g., @student.university.edu). The platform automatically issues a verification link to confirm account ownership before granting entry.
Access control: prevents external email domains from registering while avoiding a complex identity provider (IdP) integration.
Best suited for: Institutions wanting targeted student access without establishing a direct Single Sign-On connection.
Option 3: Email web service validation
-
How it works:
The school sets up a simple web server, protected (or not) by basic authentication.
When a user tries to sign-in or sign-up, the Monolith queries the web server:
GET <http://www.school.com/>...?email={email}
OR
GET <http://www.school.com/.../{email}>The web server responds with a JSON payload containing a mandatory authorized field:
{
"authorized": true || false
}If the field is missing, or false, or the payload is malformed, we consider the user is not authorized. If the webservice does not respond, we fallback to a previously stored result.
This validation is surrounded by exclusion rules that always let through recruiters, company users, and school admins.
Option 4: Single Sign-On (SSO)
Single Sign-On provides the most secure and streamlined login experience by connecting the platform directly to your institution's central Identity Provider (IdP):
How it works: students log in using their primary institutional credentials via supported identity protocols, such as SAML 2.0, CAS, Azure AD / Microsoft Entra ID, Okta, or Shibboleth.
Automated attribute mapping: student profile attributes (such as first name, last name, user ID, and assigned academic program or course) are automatically securely passed from your identity provider to the JobTeaser platform upon login.
SSO launchpad integration: enables one-click access directly from your university's intranet or application dashboard.
Best suited for: Institutions seeking maximum account security, automated profile maintenance, and seamless single-click user navigation.
Important information: SSO can also be implemented in tandem with Option 2: Email domain restriction, for example if your alumni population is not part of your SSO, but your institution provides them with a specific alumni email domain.
Selecting your authentication method
Your choice of authentication method determines how user accounts are provisioned and managed. Indicate your selected authentication option within the Launch Form sent by our Customer Experience team (support.careercenter@jobteaser.com).