User Authentication
Give employees one work login with the SAML LMS integration
Get learners into training with the corporate login they already use. The SAML integration connects LearnWorlds to Okta, Azure AD, and other SAML 2.0 identity providers.
TL;DR
The SAML integration moves sign-in to your corporate identity provider, so learners use one work login and you stop maintaining separate LearnWorlds passwords. It’s a SAML LMS integration for teams that already run SSO.
Retire extra passwords. Learners reach courses with the work login they already have
Keep one identity source. Your provider’s sign-in rules apply to your school too
Stop updating profiles by hand. Mapped SAML attributes fill custom fields at login
Best for: IT and L&D teams who run internal training behind a corporate identity provider.
Available on Learning Center and above.
What you can do with SAML and LearnWorlds
Use your corporate identity provider
Connect SAML 2.0 to practically any identity provider that lets you create an authentication application. Setup guides exist for five providers including Okta, Azure AD, and OneLogin.
Apply your sign-in policies
Keep authentication consistent with your other internal services, such as multifactor authentication and session duration, because sign-in happens in your identity provider.
Map attributes to user fields
Fill custom user fields like department or job title from SAML attributes at every login. Your identity provider stays the source of truth.
Log users out everywhere
Add a single logout URL and LearnWorlds calls it when a learner logs out, so your identity provider logs them out of other services too.
How LearnWorlds and SAML integrate
See what happens between your school and your identity provider at sign-in and sign-out. Automatic rows need nothing beyond the connection, and Conditional rows depend on a setting.
| LearnWorlds | SAML | Type of trigger |
|---|---|---|
| Learner clicks Sign in while logged out of the identity provider | Learner is redirected to the provider to authenticate, then back to your school | Automatic |
| Learner clicks Sign in while already logged in to the identity provider | Learner is logged in to LearnWorlds automatically | Automatic |
| First SAML login with an email your school doesn’t have | Create User adds the user to your school | Conditional |
| Any SAML login with attribute mapping set | Mapped SAML attributes overwrite the matching LearnWorlds custom user fields | Conditional |
| Learner logs out of LearnWorlds | Your single logout URL is called and the provider logs the learner out of other services | Conditional |
What teams ask before connecting
Does LearnWorlds support SAML SSO with Microsoft Entra ID and Okta?
Yes. LearnWorlds has SAML setup guides for Okta and Azure AD. Auth0, OneLogin, and Salesforce have guides too. Any other SAML 2.0 identity provider that lets you create an authentication application can connect by following its own documentation.
Does SAML SSO setup require developer or IT admin involvement?
Plan for an IT admin. Someone with access to your identity provider creates the authentication application and shares its entity ID, sign-on URL, and public certificate. The LearnWorlds school owner account then pastes those details into the SAML settings.
What happens to existing user accounts when SAML SSO is activated?
They keep working. SAML identifies each user by email address, so a learner who signs in with the same email reaches their existing account. Switching the authentication method keeps user data and roles intact, and you can bulk import users who exist only in your identity provider.
How to set up the LearnWorlds and SAML integration
Have admin access to your identity provider and the LearnWorlds school owner account ready. At the end, learners sign in to your school through your provider.
1. Create your provider app
Create an authentication application in your identity provider and note its entity ID, sign-on URL, and public certificate. Requires: admin access to your identity provider.
2. Open the SAML settings
Go to Website > Website settings > Authentication and select SAML. Requires: the LearnWorlds school owner account.
3. Add and activate SAML
Add a new SAML, activate it, and give it a name your team will recognize.
4. Enter identity provider details
Paste the IDP Identifier, the Sign-on URL, and the Identity Provider Certificate with its full BEGIN and END lines. Add a single logout URL if your provider uses one.
5. Share your service provider URLs
Copy the Service Provider URL, the ACS URL, and the Single Logout URL into your identity provider. Turn on Create User if new users need accounts at first login, then click Create.
6. Update your payment flow
Update Site Navigation for logged-out users and hide the Sign in/up form in payment sections and on the payment page. For the full setup guide, see the SAML help article.
What the SAML integration handles automatically
Redirect sign-in to your provider
LearnWorlds automatically sends learners to your identity provider when they click Sign in while logged out.
Log in signed-in users
LearnWorlds automatically logs learners in when they’re already logged in to their identity provider account.
Track affiliate registrations
LearnWorlds automatically tracks affiliate links when learners register through SAML SSO.
| What LearnWorlds handles automatically | What your team configures |
|---|---|
| Sends sign-in requests to your identity provider | Creating the SAML application and sharing its certificate |
| Matches each user by email address at login | Adding the service provider URLs to your identity provider |
| Keeps user data and roles when the login method changes | Mapping SAML attributes to custom user fields |
| Tracks affiliate links on SAML registrations | Updating payment flow and sign-in form settings |
Who uses the SAML integration and how
Corporate L&D teams training staff through Okta
Employees open the academy, sign in through Okta with their work account, and land in their courses. Access stays managed in one identity source.
Companies using Salesforce as their identity provider
Staff authenticate through Salesforce and reach LearnWorlds without another password. Create User gives new staff an account at their first login.
IT teams requiring multifactor sign-in for training
Learners sign in through the identity provider, so its multifactor authentication and session rules apply before anyone reaches course content.
What our customers are saying
“If in a week our team could onboard five companies, now they can onboard ten companies in one training session, in one day.”
Lara Oliveira, Community Learning Experience Specialist, Blip
“I love their customer support, which is top tier. I always receive quick replies, and they always solve my issues. When I first joined LearnWorlds, the platform was very simple to understand and get by. We’ve been going strong and love it!”
“The user interface is excellent, both on the main website and inside the virtual classroom. The integrations are incredibly comprehensive—so much so that after more than two years on the platform, I still haven’t explored them all.”
“I like that LearnWorlds provides me with a fully functional website where I can offer my students self-study resources and a community chat. The team is responsive and professional, and they really care about what they are doing.”
“I really appreciate the customer service at LearnWorlds; it’s been incredible and every time I’ve reached out, they’ve been expedient and gone above and beyond, even when they didn’t have something yet but were working on it.”
“The platform has been easy to set up and navigate. Plus, the onboarding calls have been helpful and tech support is extremely responsive! I am so pleased So far, the tech support has been worth every penny I’ve paid!”
“The platform integrates our website, funnels, marketing, and learning system all in one place, which is super convenient. I also appreciate their regular updates and the support team, which is extremely responsive.”
“I’ve been very impressed with LearnWorlds’ level of service so far. They’ve been very helpful with technical issues I don’t have the skills to deal with. It’s easy to use, and the initial setup was pretty easy.”
“We love how it has improved communications with our students. Daily tracking of student activity is vital to our programs and the reporting options help us see where all students are in the push of a button.”
“The wide range of features, responsive support, and regular platform updates. The value is good for the price, especially considering the range of features, regular updates, and responsive customer support.”
“The platform is really configurable, giving us a huge amount of flexibility about how to lay out our course. It’s allowed us to deploy our course in a drip feed format, which is fantastic for our learners.”
“I love how LearnWorlds makes it easy to write and implement my training materials. The platform’s support team is fantastic, providing clear answers quickly, which has been really useful.”
“What I like most about LearnWorlds is how easy and intuitive it is to use. I also really like the possibility to customize the school and make it fit your own style and brand.”
“Many features and almost everything can be customized, which makes it very easy to configure it the way you like.”
“The site is very user friendly and easy accessible. UI/UX is wonderful. The onboarding was also very easy”
“There are a lot of unique and user friendly features. The system is very customizeable.”
FAQs
SAML SSO is available on the Learning Center plan and above. Contact support if you need more than three SSO, SAML, or OpenID setups. Learning Center schools can also add three more with the Scale package.
It’s built in. You set it up in your LearnWorlds authentication settings with details from your identity provider, with no Zapier or Make step involved. If SAML doesn’t fit your system, the Custom SSO integration lets you use your own login page.
No. Sign-up and password reset in LearnWorlds only work with the default LearnWorlds authentication, so your identity provider handles both. Keep only the sign-in link on your school.
No. SAML doesn’t push email changes from the identity provider to LearnWorlds, so update the new address manually in your school and in your identity provider.
Only the school owner can still get in. If SAML is your only sign-in method and the setup breaks, the owner signs in through the LearnWorlds account page at account.learnworlds.com/login.
Yes, if your organization already runs a SAML identity provider. After a one-time setup, LearnWorlds sends every sign-in to that provider and can create accounts at first login. Mapped fields refresh at each login, and you can see more LearnWorlds integrations.
Published:
Last Update: