This guide provides the steps required to configure Single Sign-On using Security Assertion Markup Language (SAML 2.0) and Provisioning using System for Cross-domain Identity Management (SCIM 2.0) for Udemy Business.
Note:
Note: On March 25, 2026, we introduced a new, streamlined way to configure SSO. This new experience became the standard setup experience for all net-new configurations after that date, and we are currently working to transition all existing connections from the legacy experience. You can read about the now standard experience here. Please reach out to the Udemy Business support team if you have any questions.
- Existing Okta and Udemy Business customers who wish to enable SCIM Provisioning in Okta should use this configuration guide.
- Learn how to configure advanced SSO settings on an organizational level.
- Cohort learning: Review how to configure SSO for our cohort learning platform, Corp U.
Please note:
- Single sign-on and provisioning are available to Udemy Business Enterprise Plan customers.
- Users provisioned through Okta will not take up a license until they log into the Udemy Business application for the first time.
- SCIM provisioning changes can only be synced from Okta to Udemy Business, not the other way round.
- Users and Groups managed by SCIM in Okta cannot be changed within the Udemy Business app - SCIM is the single source of truth for user and group data.
Table of contents
- Supported SAML attributes
- Configuration Steps
Features
Udemy Business supports the following SAML attributes
Please note: all attributes are space and case-sensitive and do not include the colon. Please copy paste directly from the list below to ensure proper formatting:
SAML Attribute |
Required? |
Description |
| Yes | the unique email of the user | |
firstName |
Optional | the first name of the user |
middleName |
Optional | the middle name (if any) of the user |
lastName |
Optional | the last name of the user |
displayName |
Optional | the fully formatted name of the user |
Name ID |
Optional | an identifier that can be used in cases where a name is duplicated |
groups |
Optional | the list of groups to which the user belongs |
externalID |
Optional | Okta automatically populates the externalID attribute field with the Okta User ID. If you wish to persist your own unique user IDs then you can complete this on Okta by following this article, Setup SSO, and mapping your udemy external ID attribute. |
lmsUserID |
Optional | a unique user ID specified by the customer. (an lms integration must be configured for this value to pass over.) |
licenseTypes |
Optional | specifies the types of Udemy Business license assigned to a user. Values include either Enterprise or Enterprise Pro. |
licensePoolName |
Optional | an optional attribute to identify which license pool the user is associated with. |
Configuration Steps
1. To get started, log into your Udemy Business account and go to the User Access page from Manage > Settings > Single Sign-On (SSO).
Click Start setup. Choose your Identity Provider and follow the instructions from there to enable SCIM, and generate your credentials for inputting into your Identity Provider, as part of the configuration process.
2. From your Okta, access the Applications page from the sidebar.
3. Click on Browse App Catalog, search for Udemy Business and click Add Integration.
4. Adding the Udemy Business app will redirect you to the Application General Settings - Required page as shown below. Choose a name for your Application label and fill in the values below
Application Label: Choose a name for the application
Audience URI (SP Entity ID): PingConnect (If you have any issues with this value, reach out to Udemy Business Support)
Subdomain: (if your login url is demo.udemy.com put demo)
Domain: udemy.com
Click Done.
5. Next, click the Sign On tab then Edit.
Scroll down to Default Relay State and add
https://pingone.com/1.0/d905a6ca-adf9-45e2-9b9d-0d6485f27206 and Save.
6. Go to the Assignments Tab and Assign the users or groups you want access to the Udemy Application
7. On the same page, scroll down to SAML Signing Certificates. Click on Actions then View IdP metadata. Copy the metadata URL to your clipboard.
(Alternatively, you can select the Download certificate to download the metadata file to your computer).
Supported features
The Okta/Udemy Business SAML integration currently supports the following features:
- IdP-initiated SSO
- SP-initiated SSO
- JIT (Just In Time) Provisioning
How to add SAML attributes
Optional Step: You can follow these optional instructions to add specific attributes for more customization of your Udemy Business app integration with Okta. If you prefer to skip this, please proceed to the next step.
Here is an example describing how to add and use the additional licensePoolName attribute:
How to add SAML attributes
Optional Step: You can follow these optional instructions to add specific attributes for more customization of your Udemy Business app integration with Okta. If you prefer to skip this, please proceed to the next step.
Here is an example describing how to add and use the additional email attribute:
In your Okta Udemy Application, go to Sign On then Edit.
Look for the Attributes (Optional) setting and hit the drop down.
The name value will be the Udemy Attribute name and the Value will be the Okta attribute name. If we want to map email to user.email we will set the name as email and the value to be user.email. Click Save.
8. Navigate back to your Udemy Business account and access the Single sign-on (SSO) settings. On the configuration page, choose the appropriate metadata configuration method, and follow the instructions to create the SSO connection with your Identity Provider and Udemy Business.
Please note: If you are looking to enable Login via SSO provider only within Optional settings, please ensure your SSO is properly working by logging out and logging back in via SSO, before enabling this feature. Otherwise, you may be locked out of your Udemy Business account.
9. Click Save. SSO setup is now complete!
If you wish to continue and set up SCIM Provisioning in Okta please use this configuration guide.
For SP-initiated SSO
1. Go to: https://[your-subdomain].udemy.com.
2. Click Continue with SSO.