Udemy for Business supports Single Sign-On (SSO) integrations for Security Assertion Mark-up Language (SAML 2.0) standard Identity Providers (IdP). The list below includes links to tutorials that outline how you can set up SSO integration for your Identity Provider.
- How to Configure Single Sign-On & Provisioning in Okta
- How to Configure SSO with Onelogin
- How to Configure SSO with G Suite for Work
- How to Configure SSO with ADFS
- How to Configure SSO with Azure AD
How to enable SSO in your Udemy for Business account
You can enable SSO in your Udemy for Business account yourself, using our self-serve settings, by doing the following.
- Access Manage > Settings > Single Sign-On (SSO).
- Click Start Setup
- Choose your Identity Provider and using our supporting documentation, configure your SSO integration and choose from a range of optional settings.
How to pause or delete SSO in your Udemy for Business account
You can pause or delete SSO in your Udemy for Business account using our self-serve settings, by doing the following.
- Access Manage > Settings > Single Sign-On (SSO).
- Use the toggle to pause your connection or the Delete Connection link to remove the SSO connection completely.
Both actions will prevent your users logging into Udemy for Business through SSO. By pausing, however, all of the SSO connection details are maintained. If you delete the connection, you will need to configure SSO once again, if you wish to enable it in future.
How to replace your SAML Signing Certificate
When your SSO certificate is due to expire, the owner of the Udemy for Business account will receive an email notifying them of this, 30 days prior to the SSO certificate expiry date. If the certificate is not updated, the owner will also receive an additional reminder, 7 days prior to the SSO certificate expiry date.
You can replace your SAML Signing Certificate in your Udemy for Business account by using our self-serve settings.
- Access Manage > Settings > Single Sign-On (SSO).
- Use the Replace Certificate link to upload a new SAML Signing Certificate, which is provided by your Identity Provider.
- Replace the certificate in your Identity Provider once it’s been updated in Udemy for Business.
Note: Please update your SAML Signing Certificate in Udemy for Business first before updating it in your Identity Provider to avoid a certificate mismatch from occurring which would prevent your team from being able to access your Udemy for Business account.
Configure optional settings for your SSO connection
Further optional settings can be configured when setting up or editing your SSO connection. These include:
- Login via SSO Provider only: by selecting this option all users will be forced to log in via SSO. If this option is not selected, users will be able to login via SSO or their username and password.
- Custom redirect URL: insert the URL of the page you wish your users to land on, if an error occurs with your SSO connection.
- Session timeout: set a time, after which, inactive users will be automatically logged out of Udemy for Business.
- Single logout: if selected, when a user logs out of Udemy for Business, they will be logged out of all SSO applications.
- Allow SSO auto-provisioning: if checked, new users logging in through SSO will be automatically provisioned with a license. Otherwise, only existing users and users that have been invited to the account will be allowed to log in and consume a license.
- Allow deactivated users to be reactivated via SSO: when enabled, users that have been deactivated in the Udemy for Business account will be automatically reactivated when they log in again through SSO (these users must also remain provisioned with access via SSO to the Udemy for Business app in your IdP).
