User Authentication
Let learners sign in once with the OpenID LMS integration
Give learners one login for your website and your school. The OpenID integration connects LearnWorlds to the identity provider you already use.
TL;DR
The OpenID integration lets learners sign in to your school with the account they already use, so you stop managing a second set of passwords. It’s an OpenID LMS integration you set up in your LearnWorlds settings.
Drop separate passwords. Learners sign in once with their identity provider account
Skip manual account setup. Create User adds new learners at their first login
Stop re-keying profile data. Mapped attributes fill custom fields at every login
Best for: IT and L&D teams who want learners to use their existing company login for training.
Available on Learning Center and above.
What you can do with OpenID and LearnWorlds
Connect your OpenID provider
Set up OpenID Connect with practically any identity provider that lets you create an authentication application. LearnWorlds has step-by-step guides for eight providers including Google, Okta, and Microsoft Entra.
Create accounts at first login
Turn on Create User and LearnWorlds adds a new user the first time someone signs in with an email your school doesn’t have yet.
Map provider attributes to fields
Fill custom user fields like job title or department from your identity provider at every login. The provider is the source of truth, so its values overwrite what LearnWorlds holds.
Run several login methods together
Use OpenID Connect next to SAML, custom SSO, or the WordPress SSO plugin. You can run up to three SSO, SAML, or OpenID setups before you contact support for more.
How LearnWorlds and OpenID integrate
See what happens at each sign-in once OpenID Connect is active. Automatic rows need no setup beyond the connection, and Conditional rows depend on a setting you turn on.
| LearnWorlds | OpenID | Type of trigger |
|---|---|---|
| Learner clicks Sign in while logged out of their identity provider | Learner is redirected to the identity provider to authenticate, then back to your school | Automatic |
| Learner clicks Sign in while already logged in to their identity provider | Learner is logged in to LearnWorlds with no extra prompt | Automatic |
| First login with an email your school doesn’t have | Create User adds a new user to your school | Conditional |
| Any SSO login with attribute mapping set | Mapped provider attributes overwrite the matching LearnWorlds custom user fields | Conditional |
| Login after the email changes in the identity provider | Identify by ID updates the LearnWorlds username and email | Conditional |
What teams ask before connecting
Can LearnWorlds connect to our existing identity provider using OpenID Connect?
Yes, in most cases. You can set up OpenID Connect with practically any identity provider that lets you create an authentication application. LearnWorlds has guides for eight providers including Okta, Auth0, and Microsoft Entra. For any other provider, follow its documentation and add the client ID and secret in LearnWorlds.
Does setting up OpenID Connect require developer resources?
It’s a configuration task in two admin screens. You create an authentication application in your identity provider and paste its client ID, client secret, and configuration details into LearnWorlds. The school owner account makes the changes, and custom attributes may need extra setup in your identity provider.
What happens if a user already exists in LearnWorlds when SSO is first turned on?
Their account carries over. SSO identifies users by email address, so a learner who signs in with the same email lands in their existing account. Create User only adds a new account when no user with that email exists. Changing the authentication method keeps user data and roles intact.
How to set up the LearnWorlds and OpenID integration
Have admin access to your identity provider and the LearnWorlds school owner account ready. At the end, learners sign in to your school through your provider.
1. Create your provider app
Create an authentication application in your identity provider and copy its client ID and client secret. Requires: admin access to your identity provider.
2. Open OpenID Connect settings
Go to Website > Website settings > Authentication and select OpenID Connect. Requires: the LearnWorlds school owner account, which is the only one that can sign in if the setup is wrong.
3. Add and activate a connection
Add a new OpenID Connect, activate it, and give it a name your team will recognize.
4. Enter your provider details
Add the client ID and client secret, then whitelist the redirect URL in your provider’s OAuth app. Use a discovery document link or manual setup with the openid, profile, and email scopes.
5. Choose your user settings
Turn on Create User to add new users at first login and Identify by ID to update usernames and emails from your provider. Click Create to save.
6. Update your payment flow
If you turn off LearnWorlds login, update Site Navigation for logged-out users and hide the Sign in/up form in payment sections. For the full setup guide, see the OpenID help article.
What the OpenID integration handles automatically
Redirect learners to sign in
LearnWorlds automatically sends learners to your identity provider when they click Sign in while logged out.
Log in returning users
LearnWorlds automatically logs learners in when they’re already signed in to their identity provider account.
Track affiliate registrations
LearnWorlds automatically tracks affiliate links when learners register through OpenID Connect.
| What LearnWorlds handles automatically | What your team configures |
|---|---|
| Redirects sign-in requests to your identity provider | Creating the authentication application in your identity provider |
| Matches each user by email address at login | Choosing the Create User and Identify by ID settings |
| Tracks affiliate links on OpenID registrations | Mapping provider attributes to custom user fields |
| Keeps user data and roles when the login method changes | Updating payment flow and sign-in form settings |
Who uses the OpenID integration and how
Corporate training teams on Microsoft Entra
Employees click Sign in on the academy, authenticate with their work account, and land in their courses. Nobody has to issue or reset a separate LearnWorlds password.
Software companies training customers on Auth0
Customers sign in with the Auth0 account they use for your website. Create User gives first-time learners a LearnWorlds account at their first login.
Membership teams keeping profiles in sync
Members sign in through your identity provider, and attribute mapping copies fields like job title into LearnWorlds. Profiles stay current without manual edits.
FAQs
OpenID Connect is available on the Learning Center plan and above. Contact support if you need more than three SSO, SAML, or OpenID setups. Learning Center schools can also add three more with the Scale package.
It’s native. You configure it in your LearnWorlds authentication settings with details from your identity provider, with no Zapier or Make step involved. If you need a login page of your own, see the Custom SSO integration.
No. With an external identity provider, the LearnWorlds password reset isn’t available, and your provider handles sign-up and password resets. Use only the sign-in link on your school.
Update it in both places. SSO identifies users by email, so a new address has to change in your school and in your identity provider. With Identify by ID turned on, LearnWorlds updates the username and email from the provider at login.
Only the LearnWorlds school owner account can still sign in. That’s why the owner account sets up OpenID Connect and makes every later change to it.
Yes, if your learners already have accounts with an identity provider. After a one-time setup, LearnWorlds sends them to that provider to sign in and can create their account at first login. Your team stops issuing and resetting a second set of passwords, and you can browse more LearnWorlds integrations.
Published:
Last Update:


