User Authentication

Let learners sign in once with the OpenID LMS integration

Give learners one login for your website and your school. The OpenID integration connects LearnWorlds to the identity provider you already use.

TL;DR

The OpenID integration lets learners sign in to your school with the account they already use, so you stop managing a second set of passwords. It’s an OpenID LMS integration you set up in your LearnWorlds settings.

Drop separate passwords. Learners sign in once with their identity provider account

Skip manual account setup. Create User adds new learners at their first login

Stop re-keying profile data. Mapped attributes fill custom fields at every login

Best for: IT and L&D teams who want learners to use their existing company login for training.

Available on Learning Center and above.

What you can do with OpenID and LearnWorlds

Connect your OpenID provider

Set up OpenID Connect with practically any identity provider that lets you create an authentication application. LearnWorlds has step-by-step guides for eight providers including Google, Okta, and Microsoft Entra.

Create accounts at first login

Turn on Create User and LearnWorlds adds a new user the first time someone signs in with an email your school doesn’t have yet.

Map provider attributes to fields

Fill custom user fields like job title or department from your identity provider at every login. The provider is the source of truth, so its values overwrite what LearnWorlds holds.

Run several login methods together

Use OpenID Connect next to SAML, custom SSO, or the WordPress SSO plugin. You can run up to three SSO, SAML, or OpenID setups before you contact support for more.

How LearnWorlds and OpenID integrate

See what happens at each sign-in once OpenID Connect is active. Automatic rows need no setup beyond the connection, and Conditional rows depend on a setting you turn on.

LearnWorldsOpenIDType of trigger
Learner clicks Sign in while logged out of their identity providerLearner is redirected to the identity provider to authenticate, then back to your schoolAutomatic
Learner clicks Sign in while already logged in to their identity providerLearner is logged in to LearnWorlds with no extra promptAutomatic
First login with an email your school doesn’t haveCreate User adds a new user to your schoolConditional
Any SSO login with attribute mapping setMapped provider attributes overwrite the matching LearnWorlds custom user fieldsConditional
Login after the email changes in the identity providerIdentify by ID updates the LearnWorlds username and emailConditional

What teams ask before connecting

Can LearnWorlds connect to our existing identity provider using OpenID Connect?

Yes, in most cases. You can set up OpenID Connect with practically any identity provider that lets you create an authentication application. LearnWorlds has guides for eight providers including Okta, Auth0, and Microsoft Entra. For any other provider, follow its documentation and add the client ID and secret in LearnWorlds.

Does setting up OpenID Connect require developer resources?

It’s a configuration task in two admin screens. You create an authentication application in your identity provider and paste its client ID, client secret, and configuration details into LearnWorlds. The school owner account makes the changes, and custom attributes may need extra setup in your identity provider.

What happens if a user already exists in LearnWorlds when SSO is first turned on?

Their account carries over. SSO identifies users by email address, so a learner who signs in with the same email lands in their existing account. Create User only adds a new account when no user with that email exists. Changing the authentication method keeps user data and roles intact.

How to set up the LearnWorlds and OpenID integration

Have admin access to your identity provider and the LearnWorlds school owner account ready. At the end, learners sign in to your school through your provider.

1. Create your provider app

Create an authentication application in your identity provider and copy its client ID and client secret. Requires: admin access to your identity provider.

2. Open OpenID Connect settings

Go to Website > Website settings > Authentication and select OpenID Connect. Requires: the LearnWorlds school owner account, which is the only one that can sign in if the setup is wrong.

3. Add and activate a connection

Add a new OpenID Connect, activate it, and give it a name your team will recognize.

4. Enter your provider details

Add the client ID and client secret, then whitelist the redirect URL in your provider’s OAuth app. Use a discovery document link or manual setup with the openid, profile, and email scopes.

5. Choose your user settings

Turn on Create User to add new users at first login and Identify by ID to update usernames and emails from your provider. Click Create to save.

6. Update your payment flow

If you turn off LearnWorlds login, update Site Navigation for logged-out users and hide the Sign in/up form in payment sections. For the full setup guide, see the OpenID help article.

What the OpenID integration handles automatically

Redirect learners to sign in

LearnWorlds automatically sends learners to your identity provider when they click Sign in while logged out.

Log in returning users

LearnWorlds automatically logs learners in when they’re already signed in to their identity provider account.

Track affiliate registrations

LearnWorlds automatically tracks affiliate links when learners register through OpenID Connect.

What LearnWorlds handles automaticallyWhat your team configures
Redirects sign-in requests to your identity providerCreating the authentication application in your identity provider
Matches each user by email address at loginChoosing the Create User and Identify by ID settings
Tracks affiliate links on OpenID registrationsMapping provider attributes to custom user fields
Keeps user data and roles when the login method changesUpdating payment flow and sign-in form settings

Who uses the OpenID integration and how

Corporate training teams on Microsoft Entra

Employees click Sign in on the academy, authenticate with their work account, and land in their courses. Nobody has to issue or reset a separate LearnWorlds password.

Software companies training customers on Auth0

Customers sign in with the Auth0 account they use for your website. Create User gives first-time learners a LearnWorlds account at their first login.

Membership teams keeping profiles in sync

Members sign in through your identity provider, and attribute mapping copies fields like job title into LearnWorlds. Profiles stay current without manual edits.

FAQs

OpenID Connect is available on the Learning Center plan and above. Contact support if you need more than three SSO, SAML, or OpenID setups. Learning Center schools can also add three more with the Scale package.

It’s native. You configure it in your LearnWorlds authentication settings with details from your identity provider, with no Zapier or Make step involved. If you need a login page of your own, see the Custom SSO integration.

No. With an external identity provider, the LearnWorlds password reset isn’t available, and your provider handles sign-up and password resets. Use only the sign-in link on your school.

Update it in both places. SSO identifies users by email, so a new address has to change in your school and in your identity provider. With Identify by ID turned on, LearnWorlds updates the username and email from the provider at login.

Only the LearnWorlds school owner account can still sign in. That’s why the owner account sets up OpenID Connect and makes every later change to it.

Yes, if your learners already have accounts with an identity provider. After a one-time setup, LearnWorlds sends them to that provider to sign in and can create their account at first login. Your team stops issuing and resetting a second set of passwords, and you can browse more LearnWorlds integrations.

Published:

Last Update: