This article outlines how to configure single sign-on (SSO) with Udemy Business for any identity provider that supports SAML2.0 SSO.
Additional resources:
- An overview of Udemy Business SSO & core features
- Implementation guides for pre-configured IdPs (Okta, Azure, AD FS, OneLogin, Google Workspace)
Please note: SSO integration is only available with the Enterprise Plan.
How to configure SSO
Pre-requisites
1. Download the Udemy Business SSO Metadata file.
2. You are an Admin within your Udemy environment.
Part 1 - Setting up Udemy Business as a Service Provider
For specific instructions in establishing a SSO connection in your system we recommend consulting your documentation
3. Use the provided UB metadata file to configure SSO within your Identity provider by saving the file or copying the URL. This process differs per identity provider so please refer to the particular Identity provider article for details.
4. Confirm SAML configuration values:
-
- Entity ID: PingConnect
- ACS URL: https://sso.connect.pingidentity.com/sso/sp/ACS.saml2
- Logon/Base URL: Your Udemy Environment URL.({company}.udemy.com)
- Relay State (optional): https://pingone.com/1.0/d905a6ca-adf9-45e2-9b9d-0d6485f27206
- X509 Certificate: Found in Udemy metadata file
Please note: If you are already using PingConnect as an Entity ID for another existing SSO application, please contact Udemy to create a unique Entity ID and generate a custom metadata file.
5. Confirm SAML attributes. Identity providers often provide these by default but you may wish to edit these attributes.
Udemy Business supports the following SAML attributes
Please note: all attributes are space and case-sensitive and do not include the colon. Please copy paste directly from the list below to ensure proper formatting:
Required attributes
- email : the unique email of the user
Optional attributes
- firstName : the first name of the user
- middleName : the middle name (if any) of the user
- lastName : the last name of the user
- displayName : the fully formatted name of the user
- Name ID : an identifier that can be used in cases where a name is duplicated
- groups : the list of groups to which the user belongs. Note: If you do not plan to pass over groups do not send this attribute, as it will override existing groups.
- externalID : a unique user ID specified by the customer
- lmsUserID : a unique user ID specified by the customer
6. Download the Metadata file from your system
Part 2 - Configuring Udemy
1. Login to Udemy Business
2. Manage > Settings > Single Sign-On (SSO) > Start setup, and select Custom.
3. Connection Name: This can be anything (e.g. CSOD SSO).
4. Import the Metadata via URL or from the file you previously downloaded from your system.
5. Confirm Configuration
-
- Verify that all parameters are correct for your environment.
6. Save. A banner will display in the lower right if the settings are successfully applied.
Your SSO Configuration is complete! You can now provision users for Udemy Business in your SSO tenant.
If you wish to configure SCIM, please review Configure SCIM Provisioning With Udemy’s SCIM API.