This article outlines how to configure single sign-on (SSO) with Udemy Business for any identity provider that supports SAML2.0 SSO.
Note:
- On March 25, 2026, we introduced a new, streamlined way to configure SSO. This new experience became the standard setup experience for all net-new configurations after that date, and we're currently working to transition all existing connections from the legacy experience. You can read about the now standard experience here. Please reach out to the Udemy Business support team if you have any questions.
Additional resources:
- An overview of Udemy Business SSO & core features
- Implementation guides for pre-configured IdPs (Okta, Azure, AD FS, OneLogin, Google Workspace)
Please note: SSO integration is only available with the Enterprise Plan.
How to configure SSO
Pre-requisites
1. Download the Udemy Business SSO Metadata file.
2. You are an Admin within your Udemy environment.
Part 1 - Setting up Udemy Business as a Service Provider
For specific instructions in establishing a SSO connection in your system we recommend consulting your documentation
3. Use the provided UB metadata file to configure SSO within your Identity provider by saving the file or copying the URL. This process differs per identity provider so please refer to the particular Identity provider article for details.
4. Confirm SAML configuration values:
Entity ID: PingConnect
ACS URL: https://sso.connect.pingidentity.com/sso/sp/ACS.saml2
Logon/Base URL: Your Udemy Environment URL.({company}.udemy.com)
Relay State (optional): https://pingone.com/1.0/d905a6ca-adf9-45e2-9b9d-0d6485f27206
X509 Certificate: Found in Udemy metadata filePlease note: If you are already using PingConnect as an Entity ID for another existing SSO application, please contact Udemy to create a unique Entity ID and generate a custom metadata file.
5. Confirm SAML attributes. Identity providers often provide these by default but you may wish to edit these attributes.
Udemy Business supports the following SAML attributes
Please note: all attributes are space and case-sensitive. Please copy paste directly from the list below to ensure proper formatting:
| SAML Attribute | Required? | Description |
| Yes | the unique email of the user | |
firstName |
Optional | the first name of the user |
middleName |
Optional | the middle name (if any) of the user |
lastName |
Optional | the last name of the user |
displayName |
Optional | the fully formatted name of the user |
Name ID |
Optional | an identifier that can be used in cases where a name is duplicated |
groups |
Optional | the list of groups to which the user belongs. Note: If you do not plan to pass over groups do not send this attribute, as it will override existing groups. |
externalID |
Optional | a unique user ID specified by the customer |
lmsUserID |
Optional | a unique user ID specified by the customer. (an lms integration must be configured for this value to pass over.) |
licenseTypes |
Optional | specifies the types of Udemy Business license assigned to a user. Values include either Enterprise or Enterprise Pro |
licensePoolName |
Optional | an optional attribute to identify which license pool the user is associated with. |
6. Download the Metadata file from your system
Part 2 - Configuring Udemy
1. Login to Udemy Business
2. Manage > Settings > Single Sign-On (SSO) > Start setup, and select Custom.
3. Connection Name: This can be anything (e.g. CSOD SSO).
4. Import the Metadata via URL or from the file you previously downloaded from your system.
5. Confirm Configuration
- Verify that all parameters are correct for your environment.
6. Save. A banner will display in the lower right if the settings are successfully applied.
Your SSO Configuration is complete! You can now provision users for Udemy Business in your SSO tenant.
If you wish to configure SCIM, please review Configure SCIM Provisioning With Udemy’s SCIM API.