Single Sign-On Overview (SSO): Create a Simpler Login Experience

Overview

Single Sign-On (SSO) allows learners and administrators to access NovoEd using the same organizational credentials they already use for other workplace systems. Instead of maintaining a separate NovoEd password, users authenticate through your organization’s existing identity provider.

For learners, this creates a simpler path into the learning experience. For organizations, it allows NovoEd to fit more naturally into the way employees already access their workplace tools.

Why set up SSO with NovoEd?

1. Create a simpler, more connected learner experience
   Learners can access NovoEd using the organizational credentials they already know, rather than maintaining a separate NovoEd password. This removes an extra barrier to learning while making NovoEd feel more naturally connected to the other systems organizations use.

2. Support adoption and repeat engagement
   Making NovoEd easier to access can reduce friction each time users return to the platform, particularly for programs designed around ongoing participation rather than a single learning event.

3. Centralize identity and access management
   SSO allows your organization’s existing identity provider to handle authentication for NovoEd, helping align platform access with the identity-management practices your organization already has in place.

4. Streamline account lifecycle management
   When paired with supported user-provisioning processes, your organization can more efficiently manage how users provided access to and from NovoEd as employees join, change roles, or leave the organization.

What is the user experience?

With NovoEd's preferred Service Provider (SP)-initiated SSO workflow, the experience is straightforward:

1. Typically, users are enrolled into NovoEd learning experiences, receive a Welcome Email, and follow the link in the email to access NovoEd.

2. A user visits your organization's NovoEd URL.

3. NovoEd directs them to your organization's identity provider.

4. The learner signs in using their organizational credentials.

5. Once their identity is confirmed, they are returned to NovoEd.

See our article, SSO Login Experiences, for examples of the experience.

Note: An Identity Provider (IdP)-initiated workflow can also be configured by request.

What does my organization need?

NovoEd uses the SAML 2.0 protocol for SSO integrations. Your organization's identity provider must support SAML 2.0.

Identity providers that NovoEd customers have used include:

• Auth0

• Microsoft Entra

• Okta

• OneLogin

• PingFederate

Your organization's IT or identity management team will typically be involved in configuring the connection between your identity provider and NovoEd.

How can I get started?

1. Open a Ticket with NovoEd:
   If your organization isn't currently using SSO with NovoEd, contact your NovoEd Customer Success Manager or file a ticket with NovoEd Support. We'll provide you with metadata that can be shared with your IT/identity management team.

2. Engage with Your IT/Identity Management Team:
   Some organizations require that an internal ticket is filed in order to engage their IT/identity management team. We recommend ensuring this step is taken, if an internal process is in place at your organization.
   
   Most IT/identity management teams ask for:

   1. Service Provider (NovoEd)'s metadata: We'll provide this to you.

   2. Contact Info: NovoEd Support - hello@novoed.com

   3. Documentation: We recommend sending a link to our article: SSO Set Up Process.