This guide covers how to configure Single Sign-On (SSO) between Okta and Udemy Business using either SAML 2.0 or OIDC.
- Note: On March 25, 2026, we introduced a new, streamlined way to configure SSO. This new experience became the standard setup experience for all net-new configurations after that date, and we are currently working to transition all existing connections from the legacy experience. You can read about the legacy experience here. Please reach out to the Udemy Business support team if you have any questions.
- Existing Okta and Udemy Business customers who wish to enable SCIM Provisioning in Okta should use this configuration guide.
- Learn how to configure advanced SSO settings on an organizational level.
Please note:
- Single sign-on and provisioning are available to Udemy Business Enterprise Plan customers only.
- Don’t enable Login via SSO Provider Only until you have successfully tested your connection. If SSO is not properly configured, all users will be locked out of Udemy Business.
- Users provisioned through Okta will not take up a license until they log into the Udemy Business application for the first time.
- SCIM provisioning changes can only be synced from Okta to Udemy Business, not the other way round.
- Users and groups managed by SCIM in Okta cannot be modified within the Udemy Business app - Okta is the single source of truth for user and group data.
Table of contents
- Before you begin
- Configuration Steps
- Option A: Configure using SAML
- Testing your SSO connection
- Need help?
Before you begin
- You must have administrator access to both your Udemy Business account and your Okta organization.
- Decide which protocol to use: SAML or OIDC. If you’re unsure, check with your IT team. Both are fully supported.
Configuration Steps
Option A: Configure using SAML
Step 1: Add the Udemy Business app in Okta
- In Okta, navigate to Applications from the sidebar.
- Click Browse App Catalog.
3. Search for Udemy Business, then click Add Integration.
-
Note: Don’t select the Udemy Business (Legacy) app.
-
On the Application General Settings - Required page, fill in the following values:
- Application label: Choose a name for the application (for example, Udemy Business.)
- Audience URI: https://sso.udemy.com
- Subdomain: Your Udemy Business subdomain (for example, if your login URL is demo.udemy.com, enter demo)
- Domain: udemy.com
ACS URL: https://sso.udemy.com/api/oauth/saml
Note: These need to be exact (no trailing slashes).
5. Click Done.
Step 2: Assign users and groups
- Go to the Assignments tab.
- Click Assign and select the users or groups you want to have access to the Udemy Business application.
Step 3: Configure user attributes and claims (Optional)
- Click the Sign On tab.
- Select Configure profile mapping.
- Click Add Attribute.
- Complete these fields with the desired attribute you want to add:
| Attribute Name | Data type | Display name | Variable name | External name | External Namespace | eNUM |
| licenseTypes | string array | License Types | licenseTypes | licenseTypes | urn:ietf:params:scim:schemas:extension:udemy:2.0:User | enabled |
| licensePoolName | string | License Pool Name | licensePoolName | licensePoolName | urn:ietf:params:scim:schemas:extension:udemy:2.0:User | |
| externalId | string | Udemy External ID | udemyExternalId | externalId | urn:ietf:params:scim:schemas:core:2.0:User | |
| employeeNumber | string | employeeNumber | employeeNumber | employeeNumber | urn:ietf:params:scim:schemas:extension:enterprise:2.0:User | |
| title | string | title | Udemytitle | title | urn:ietf:params:scim:schemas:core:2.0:User |
- Once you’ve added the desired attribute, go to Mappings.
- Select Okta User to Udemy.
-
Map the Okta attribute you want associated with the Udemy attribute.
- Select Save Mapping and Apply updates.
Step 4: Retrieve your Okta SAML metadata
-
Go to the Sign On tab, scroll down to Metadata URL and copy it to your clipboard.
- Go to your Udemy Admin Portal and go to the SSO Configuration screen by going to Manage > Settings > Single sign-on (SSO).
- Under Start setup, select Okta.
- Select connection type SAML.
- Configure Using: Metadata URL, paste the metadata URL from Okta, then click Import Metadata.
-
Click the Save button.
-
Your SSO connection is now enabled. You can verify the status on the Single sign-on (SSO) page, which will display the connection status, certificate expiration date, and options to edit or pause the connection.
Option B: Configure using OIDC
Step 1: Create an OIDC app integration in Okta
For additional guidance, refer to Okta's official documentation on creating an OIDC app integration and the OpenID Connect & OAuth 2.0 API.
- In Okta, navigate to Applications from the sidebar and click Create App Integration.
-
Select OIDC – OpenID Connect as the sign-in method, then select Web Application as the application type. Click Next.
- Configure the OIDC Integration
- Application Integration Name: Enter a name for the application (for example, Udemy Business).
- Sign-in redirect URI: https://sso.udemy.com/api/oauth/oidc
- Sign-out redirect URI (optional): Your Udemy Business domain (for example, if your login URL is demo.udemy.com, enter demo.udemy.com).
- Grant type: Authorization Code
- Click Save.
Step 2: Assign users and groups
- Go to the Assignments tab.
- Click Assign and select the users or groups you want to have access to the Udemy Business application.
Step 3: Retrieve your Okta OIDC credentials
-
On the next screen, you’ll see the app’s client id and secret. You’ll need to copy these to add to the settings in your Udemy instance.
- For the Well Known URL for the configuration method, this is the standard Okta URL
<your okta instance>/.well-known/openid-configuration
Step 4: Complete OIDC setup in Udemy Business
Return to the Udemy Business SSO configuration screen.
- In the Name field, enter a name for this connection.
- Select OIDC as the Connection type.
- Enter the Client ID and Client Secret retrieved from Okta.
- Under Configure using Well-known URL: Select Well-known URL, (<your okta instance>/.well-known/openid-configuration)
and click Import metadata. - Click Save.
Testing your SSO connection
Before rolling out SSO to your organization, we recommend testing the connection:
- Open a private/incognito browser window.
- Navigate to your Udemy Business login page at https://[your-subdomain].udemy.com.
- Click Continue with SSO, select the connection you created, and sign in with a test user account.
- Confirm the user is authenticated and successfully redirected to Udemy Business.
Need help?
- If you encounter any issues during setup, contact Udemy Business Support.
- To continue and set up SCIM Provisioning in Okta, refer to the Configure SCIM Provisioning With Okta guide.