Single sign-on (SSO) with your own identity provider
Your players and learners can now sign in with the account your school or company already gives them. You connect your own identity provider yourself, in your dashboard under Connected apps → Single sign-on (SSO), and nobody types a name or picks another password. It is part of the School, Ambassador, Academy and Trainer plans, at no extra cost.
- OpenID Connect or SAML 2.0. Microsoft Entra, Okta, Google Workspace and other providers that speak either one. For SAML you give your provider's details as a link to its metadata, as the metadata file, or by hand.
- A test before anybody signs in. Test the connection takes you to your own sign-in page and back, and tells you who your provider said you are. Nobody is signed in to anything.
- On an activity. Under Results & tracking, switch on Let players sign in, choose SSO as the only sign-in option and switch on Sign-in only. Players then see a Sign in with … button on the activity's link, and their result is saved under the name and email address your provider gave.
- On your login page. With Puzzel LMS and student or learner accounts switched on, choose Single sign-on (SSO) as a way to sign in under LMS settings. People are recognised by the email address on your list.
- Only your organisation. List your email domains and only addresses at those domains can sign in. With Add new people to your list automatically switched on, somebody new at one of them joins your list the first time they sign in.
- What Puzzel.org receives. Your provider's own id for the person, their name and their email address. Never a password.
The steps for Microsoft Entra, Okta and Google Workspace are on the new Single sign-on (SSO) page under Features, and the help centre has a section on it.