SAML 2.0 SSO lets users sign in to edyoucated through your organization's identity provider. It is available alongside OpenID Connect (OIDC) SSO and uses a separate setup assisted by the edyoucated team.
This guide is for organization owners and their IT administrators. If you manage learning and development, share it with your IT team so they can prepare the identity provider configuration and coordinate the setup with edyoucated.
Preparing your setup information
Ask your IT team to prepare the following information before contacting edyoucated:
Metadata URL: Provide your identity provider's SAML metadata URL so edyoucated can use it to configure the connection.
Email domain: List all company email domains that should be associated with this SSO connection. These domains are used to identify the appropriate SSO connection when users enter their company email address at the dedicated SSO entry point.
User attribute mappings: Provide the mappings for the three attributes listed below, including which attributes your identity provider will send.
User information | Attribute |
Email address |
|
Given name |
|
Family name |
|
Confirming signing and encryption settings
Explicitly tell edyoucated:
Whether edyoucated should sign SAML requests sent to your identity provider.
Whether your identity provider sends encrypted SAML responses.
Your IT team and edyoucated will coordinate both settings to match your identity provider's configuration.
edyoucated service provider details
Your IT team needs the following values when configuring the SAML connection in your identity provider:
Setting | Value |
Assertion Consumer Service (ACS) URL: where your identity provider sends the SAML response |
|
Entity ID (Audience): identifies edyoucated as the service provider |
|
Coordinating the configuration with edyoucated
Contact edyoucated to request an assisted SAML setup. Share the metadata URL, company email domains, attribute mappings, and your signing and encryption requirements.
Obtain any certificates needed for the agreed signing and encryption settings from edyoucated.
Have your IT team configure the SAML connection in your identity provider using the service provider details above and the agreed attribute, signing, and encryption settings.
Coordinate with edyoucated to confirm that the connection is ready for an initial sign-in test.
Testing SSO sign-in
Open the edyoucated sign-in page and use the dedicated SSO entry point.
Enter a company email address belonging to one of the domains agreed during setup and continue with SSO.
Complete authentication with your identity provider.
Confirm that you can access edyoucated and that your email address, given name, and family name are correct.
If the test does not succeed, coordinate with your IT team and edyoucated to review the domain assignment, attribute mappings, and agreed signing and encryption settings before testing again.