What SSO protocol is supported?

Only SAML 2.0 is supported. No other identity provider types are accepted.

What information do I need from my IT team before setting up SSO?

You need the IdP entity ID, the SSO URL, and the certificate from your IT team.

What happens if the Unique User ID changes for a person?

That person gets a new, empty profile and loses all their previous history.

Before You Set Up Single Sign-On (SSO): Prerequisites

content unavailable

Sorry

This step's configuration is currently unavailable. To resolve this issue:

Access the administrative panel
Edit this step
Publish a new version
Update the Academy content with the latest version

Once completed, this step should be fully playable.

About this resource

Before configuring Single Sign-On, you need your IT team involved. Only SAML 2.0 is supported, and each site can have only one identity provider. IT must supply the IdP entity ID, SSO URL, and certificate. A SuperAdmin then enters these in Settings > AD and Single Sign-On. Choosing a stable Unique User ID is critical—if it ever changes for a person, they lose their history and get a blank new profile. Until SSO is fully configured, users continue signing in with their email and password.

Questions this resource answers

What SSO protocol is supported?: Only SAML 2.0 is supported. No other identity provider types are accepted.
What information do I need from my IT team before setting up SSO?: You need the IdP entity ID, the SSO URL, and the certificate from your IT team.
What happens if the Unique User ID changes for a person?: That person gets a new, empty profile and loses all their previous history.
Can users still sign in while SSO is being set up?: Yes. Until SSO is fully configured, users continue signing in with their own email and password.