• Adding and Managing Users via CSV Import

    This article outlines how admins can add and manage users using the CSV import feature. 

    Actions admins can take via the CSV import feature

    If you’re an admin for a Udemy Business account, you can use the CSV import feature to manage many users at once. You can use this feature to:

    • Bulk import new users into your account
    • Bulk add new and existing users to groups
    • Bulk change user roles (e.g. from “user” to “admin”)

    You can download an example CSV file here.

    Actions that currently cannot be done

    Currently, the CSV import cannot be used to:

    • Change the name of a user.
    • Create new groups.
    • Remove users from a group.
    • Remove users from your Udemy Business account.
    • Reactivate users that are currently deactivated.

    If you are interested in these, or any other Udemy Business features, please let us know.

    Please note: 

    • The CSV import feature is not available to group admins.
    • Currently the CSV template is only available in English.
    • The CSV file must be encoded in UTF-8 format.

    Organizations using System for Cross-domain Identity Management (SCIM)

    If your organization is using SCIM, you will not be able to modify groups managed in your Identity provider via the CSV import. SCIM managed users and groups will have a small link icon displayed next to their name in Manage Users pages. You can contact your IT team to complete this action via SCIM.

    scim_confirmation.png

    You can use the CSV import to assign SCIM-managed users to non-SCIM groups, as well as update user roles.

    Getting started with your CSV import

    To navigate to the CSV Import, take the following steps:

    1. Log into your Udemy Business account.
    2. Select Manage Users from the Manage menu at the top of the screen.
    3. Click Invite Users at the top right and then Import Users From CSV. A window will pop-up that enables you to add a unique message and upload your CSV file.
    4. Submit your CSV file. Learn how to format files for CSV imports.
    5. Upon the successful completion of your CSV upload you will see a summary message displaying the result in the modal dialog. If the CSV import file is 10KB or larger,  you will receive an email summary of the result.

    Note: Each CSV file you import can be accompanied by one message. You may edit this message on the same window that appears when you submit your CSV file. The file size limit is 1MB.

    Adding users to groups (Enterprise Plan only)

    By including group names in the “groups” column of your CSV, you can add users to existing groups you have configured within the User Management section of your Udemy Business account. This works for new users, for users you’ve invited but have not yet logged in, and existing users in your account.

    The group names in your CSV must match the group names in your Udemy Business account exactly. You can add a user to multiple groups by including multiple group names in the “groups” column, separated by a semicolon “;” character.

    It is not currently possible to remove users from groups, or to create new groups, using CSV import.

    Changing user roles

    By including either “user”  or "admin" in the “role” column of your CSV, you can give or remove administrator access. This works for new users, for users you’ve invited but have not yet logged in, and existing users in your account.

    Enterprise plan users can also assign a group admin role.

    Inviting new users to your account

    Importing a CSV containing new email addresses will invite each person in your CSV file to your Udemy Business account via email. This email message can be crafted in the same window you use to upload your CSV file. Note that only one message may be used per CSV file upload.

    It is not currently possible to remove users or groups through the CSV Import. For more information, please see Inviting Users.

    Email notifications

    An email notification will automatically be sent to all new users included in the CSV file, who have not yet joined the account. Please note: an email notification will not be sent to any user that has already joined the account.

    If you upload another CSV file at a later time or date containing the same list of users, any users who have yet to log into their Udemy Business account, will receive a further email invite (upon the successful completion of that CSV import).

    Read article
  • Adding More Licenses to Your Account

    As you continue to provide learning opportunities for your employees, you can easily add more licenses to your Udemy Business account. 

    Enterprise Plan Admins

    If you're an Enterprise Plan Admin, and need to purchase more licenses, please reach out to your Account Executive or our Support Team.

    Team Plan Admins

    If you're a Team Plan Admin, then please follow the steps below to add more licenses to your account. Please note that the total price for a team plan is calculated on a prorated basis, based on today's date and the end date of your yearly subscription.

    To add more licenses to your Team Plan account, navigate to visit Manage > Settings > Billing.

    settings_.png

    Under Subscription, click on Buy more Team Plan licenses. Select how many additional licenses you require and proceed to the payment page.

    buy_more_team_plan_license.png

    If the number of licenses purchased surpasses 20, however, please fill out the information requested on our Upgrade form.  

    UFB_Upgrade_.png

    Once you complete the form, someone from our Sales Team will get back to you and help you with the request.

    Read article
  • Adding Users With Single Sign-On (SSO)

    You will not need to manually invite users into the account if you have setup single sign-on (SSO). Here is more information on our SSO requirements.

    Read article
  • Bulk Updating Account Emails for Your Udemy Business Learners

    If your organization is planning to make any changes to company emails (i.e., utilizing a new email domain or making formatting adjustments to names), please contact our Support Team prior to implementing the changes, so we can assist with coordinating the updates on our end. 

    Please note: if your Udemy Business account has a Single Sign On (SSO) integration with System for Cross-domain Identity Management (SCIM) enabled, then changes will only need to be made in the Active Directory of your SSO Identity Provider (IdP), by your organization’s SSO Administrator.

    Read article
  • Configuring SSO

    Udemy Business supports Single Sign-On (SSO) into any provider that supports SAML2.0.

    You can enable SSO in your Udemy Business account yourself, using our self-serve settings.

    Note: SSO integration is only available with the Enterprise Plan and can only be configured by an admin.


    Where to Configure SSO

    Manage > Settings > Single sign-on (SSO)

    sso_settings.png

    How to enable SSO

    Optional SSO settings

    • Login via SSO Provider only:
      All users will be forced to log in via SSO. If this option is not selected, users will be able to login via SSO or their username and password.
      • Note: It is advised that all new configurations start with optional SSO to ensure any errors in the configuration does NOT impact the current user experience..
    • Custom redirect URL:
      insert the URL of the page you wish your users to land on, if an error occurs with your SSO connection.
    • Session timeout:
      set a time, after which, inactive users will be automatically logged out of Udemy Business.
    • Single logout:
      When a user logs out of Udemy Business, they will be logged out of all SSO applications.
    • Allow SSO auto-provisioning:
      New users logging in through SSO will be automatically provisioned with a license. Otherwise, only existing users and users that have been invited to the account will be allowed to log in and consume a license.
      • Use Case: This can be disabled when an admin wishes to manage user access directly.
    • Allow deactivated users to be reactivated via SSO:
      Users that have been deactivated will be automatically reactivated when they log in again through SSO (if these users are also still provisioned with access via SSO).

    How to pause or delete your  SSO connection

    1. Access: Manage > Settings > Single sign-on (SSO).
      *NOTE: Deleting a connection will remove all connection information, and cannot be recovered.

    Learn how to update your SAML Signing certificate.

    Read article
  • Configure SCIM Provisioning With Azure Active Directory (AD)

    Once Single Sign-on (SSO) is set up you can configure System for Cross-domain Identity Management (SCIM 2.0) provisioning in Azure Active Directory (AD) with Udemy Business. This will allow you to provision, deprovision, create groups, manage group membership and change user profile details like name and email address in Azure AD, which automatically updates Udemy Business. You will no longer need to update both Azure AD and Udemy Business separately with these actions as it will all be synced from Azure AD.

    To enable SCIM Provisioning for your Udemy Business account, first go to your Udemy Business account and access Manage > Settings > Provisioning (SCIM).

    Click Start Setup and follow the instructions to enable SCIM and generate the Secret Token (Bearer token) which you then need to put into Azure AD.

    Notes:

    • Single sign-on and provisioning are available to Udemy Business Enterprise Plan customers.
    • Users provisioned through Azure AD will not take up a license until they log into the Udemy Business application for the first time. 
    • SCIM provisioning changes can only be synced from Azure AD to Udemy Business, not the other way round. 
    • Users and Groups managed by SCIM in Azure AD cannot be changed within the Udemy Business app - SCIM is the single source of truth for user and group data.
    • You can still create groups manually in Udemy Business if you have users that you don’t need or want to push from Azure AD, eg. contractors or temporary staff.

    Configure SCIM Provisioning with Azure AD

    1. To enable SCIM Provisioning for Udemy Business, first go to your Udemy Business account and access Manage > Settings > Provisioning (SCIM).

    2. Click Start Setup, choose your Identity Provider and follow the instructions to generate the Secret Token (Bearer token) which you then need to input into Azure AD.

    1a.png

    3. Next, access your Azure AD account and go to your Udemy Business SSO app and follow the steps below to get set up. You can also refer to Microsoft’s own configuration guide for SCIM Provisioning with Azure AD for further guidance.

    Go to the Provisioning tab in your Azure portal.   

    (Note: udemyazure is a test name we used in the screenshots below for the purpose of illustrating how to configure SCIM; you should locate the app that was named by your team when configuring within your own instance) 

    1b.png

    4. Choose Automatic as the Provisioning Mode.

    1c.png

    5. In the Admin Credentials section:

    Tenant URL is: https://yourdomain.udemy.com/scim/v2 (yourdomain is the url for your Udemy Business account)

    Secret Token: This is a ‘Bearer’ token that you can generate or view inside your Udemy Business account. (go to Manage > Settings > User Access to get the Secret Token)

    6. Click Test Connection to check that it’s working correctly.  

    Optional: You can enter an email address if you wish to receive alerts from Azure about errors.

    1d.png

    7. In Mappings

    Check the attribute mapping so that user's email is mapped to emails[type eq "work"].value 

    1e.png

    1f.png

    8. In Settings

    Toggle the Provisioning Status button to On.

    1h.png

     

    9. Choose the Scope of how you want to sync your users and groups.

    1i.png

    You can sync only users and groups who are assigned the Udemy Business app if you need to restrict access to certain employees or departments. Or, you can sync all users and groups if every employee is going to have access.

    1j.png

    In order to provision more users and groups with Udemy Business access:

    10. Click Users and groups

    1k.png

    11. Click on Add User (which will give you the option to add both Users and Groups)

    Select all users or the groups you want to add to the application and click Select.

    1l.png

    Troubleshooting

    In relation to Mappings:

    1m.png

    If you experience this error when provisioning:

    {"schemas":["urn:ietf:params:scim:api:messages:2.0:Error"],"status":400,"detail":"{'emails': ['This field is required.']}"}

    You should change the mapping of the User.

    1n-1.png

    emails[type eq "work"].value needs to be mapped to userPrincipalName that is, if userPrincipalName is where the email is.

    If you go to the user profile, you should be able to see which field contains the email there.

    1o.png

    Read article
  • Configure SCIM Provisioning With OneLogin

    Once Single Sign-on (SSO) is set up you can then configure System for Cross-domain Identity Management (SCIM) provisioning in OneLogin with Udemy Business. This will allow you to provision, deprovision, create groups, manage group membership and change user profile details like name and email address in OneLogin, which automatically updates Udemy Business. You will no longer need to update both OneLogin and Udemy Business separately with these actions as it will all be synced from OneLogin.

    This article outlines how you can configure SCIM provisioning with OneLogin. 

    How to enable SCIM Provisioning

    To enable SCIM Provisioning for your Udemy Business account, first go to your Udemy Business account and access Manage > Settings > Provisioning (SCIM).

    Click Start Setup and follow the instructions to enable SCIM and generate the Secret Token (Bearer token) which you then need to save in OneLogin.

    1_21.png

    Next, access your OneLogin account and go to your Udemy Business SSO app and follow the steps below to get set up. 

    Additional information regarding how to provision users is also available in One Login's support center.

    1. In the admin panel click on the applications tab:

    2_21.png

    2. Navigate to the “Configuration” tab. Inside the “Configuration” tab, input the SCIM bearer token from your Udemy Business account that was generated above, and set to “Enabled”:

    3_21.png

    3. Next, navigate to the “Provisioning” tab, and check the “Enable provisioning” box:

    workflow_enable_provisioning.png

    Creating a rule to sync a user’s group with Udemy Business

    OneLogin uses the concept of “rules” in order to sync a user with a particular group in your Udemy Business account. There are many ways to create rules based on your different requirements for syncing groups. The following is one specific example of how to create a rule to sync a user with a group called “Engineers”.

    1. Navigate to the “Rules” tab and select “Add Rule”:

    rules_.png

    2. Prerequisite: Before moving to the next step, please contact our Support Team and request that they enable the feature flag that will allow SCIM groups to be pulled from Udemy Business. With this feature enabled you can pull the existing groups from Udemy Business and access them in OneLogin.

    3. Inside of the “Edit Mapping” screen is where you can configure the logic for your rule. In this example, we create a rule where the logic is “If the Group of the user is Engineering Group then the action is set the user’s group in Udemy Business to Engineers”: In order to pull groups “From Existing” in Udemy Business - you will need to refresh entitlements.

    actions.png

    4. Navigate to the “Parameters” tab:

    parameters.png

    5. Click on the “Groups” field:

    groups_field.png

    6. Check the “Include in User Provisioning” box and save:

    9_21.png

    7. Now, after adding a user in OneLogin and setting that user’s group to “Engineering Group”:

    10_21.png

    8. Once the user is added to the Udemy Business application and synced, based on the rule, this user will be added to the “Engineers” group in your Udemy Business account:

    11_21.png

     

    Read article
  • Creating User Groups

    Creating groups of users is an optional feature that allows you to segment your user base into specific groups for reporting purposes. Example groups could be setup as departments (e.g., Marketing or Finance) or office locations (e.g., San Francisco or London). You can add a user to more than one group.

    If you plan to use this feature, we recommend creating all your groups before inviting users to join your account. Adding people to groups before they receive the invitation to join your account allows you to capture learning data by group from the very beginning, and saves you the trouble of adding users to groups later.

    Please note: groups are available with the Enterprise Plan only.

    How to create a user group

    To create a group, please follow the steps outlined below:

    1. Access the Manage tab at the top of the screen and click on Manage Users from the drop down menu.

    manage_users_drop_down_menu_.png

    2. Click Manage Groups at the bottom left of the page.

    3.  Next, click Create Group.

    manage_groups_option.png

    4. Type in the group name. You can also add Group Admin(s) to manage the group. Learn more about Group Admins.

    5. Finally, click Create Group again.

    After the group has been created, you can also add users to it via the CSV import feature.

    entering_name_group_admins_for_new_group_admin.png

    Editing or deleting user groups

    To delete a group, change its name, or download the list of users in a group, click on the group name. Next, click on the ellipses icon (three-dots) to the right of the group title. You will see the following options: Export this Group, Group membership log, Edit group name, and Delete this group.

    editing_changing_group_options.png

    Read article
  • How to Automate User and Group Management With SCIM

    Udemy Business supports user and group access and identity management with the System for Cross-domain Identity Management (SCIM) standard. SCIM is used by Single Sign-On (SSO) services and Identity Providers to manage people across a variety of apps and tools, including Udemy Business.

    What you can do with SCIM:

    • Grant access to users and groups (provisioning).
    • Deactivate users and groups (deprovisioning). 
    • Change user details: name, email address. 
    • Create, remove or edit groups.
    • Manage group membership (users changing groups).

    What you cannot do with SCIM:

    • Delete User Personal Identifiable Information (PII) I via SCIM on any Identity Provider.
    • Sync data from Udemy Business back to the Identity Provider.
    • Manage roles (assign group admins, admins).

    Once you take any of the above supported actions, the data or change will automatically update in Udemy Business.

    Key points about SCIM Integration for your Udemy Business Account

    • Your SCIM integration setup will vary depending on the identity provider you use. 
    • Udemy Business supports SCIM Provisioning for the key identity providers and SSO services that offer access and identity management.
    • SCIM Provisioning is available to Enterprise Plan customers using Single Sign-on (SSO).
    • Users provisioned through SCIM in your SSO service will not take up a license until they join Udemy Business by signing in for the first time. When users are provisioned through SCIM, but have not signed in for the first time, they will display in the All users page with a No License status. 

    users_with_no_license.png

    How to enable SCIM provisioning

    To enable SCIM provisioning for your Udemy Business account, go to your Udemy Business account to Manage > Settings > Provisioning (SCIM)

    Scroll to the SCIM Integration section. Next, follow the instructions to enable SCIM, choose your Identity Provider from the dropdown and generate the credentials (Username and Password or Secret/Bearer token), which you then need to input into your Identity Provider as part of the configuration.

    SCIM_1.png

    Depending on which Identity Provider you use, follow the instructions in the appropriate guide below to complete the SCIM set up.

    Okta Configuration Guide 

    Azure AD Configuration Guide 

    OneLogin Configuration Guide

    How to disable SCIM provisioning

    To disable SCIM provisioning for your Udemy Business account (if you’re changing providers or no longer require SCIM) access Manage > Settings > Provisioning (SCIM).

    Scroll to the SCIM Integration section and click on the Disable Integration link and follow the instructions to disable SCIM. This will disable the integration from the Udemy Business side, but your IT team will need to disable the integration from the Identity Provider side also. 

    You can continue to use Udemy Business as usual, but you will need to manually update user and group information within the platform from now on.

    SCIM_2.png

    Deleting PII for SCIM managed learners

    If you wish to disconnect a learner from being managed by your IdP with SCIM, you can do so by first deprovisioning them in your SSO Active Directory, and then you can delete their PII in your Udemy Business account. To learn how to anonymize a learner, click here.

    If you need to manage a learner directly from within your Udemy Business account and not via your SSO IdP, and further, you do not wish to delete their PII, please reach out to our support team for further assistance.

    Read article
  • How Admins Can Add Users to a Group

    Creating groups of users is a way to segment your user base into specific groups for reporting and course assignment purposes. For example, you could create groups to match certain departments in your company or organization (e.g., Marketing or Finance). If you’ve created groups in your account and are ready to add users to them, this article outlines how you can do so.

    Please note: Groups are available with the Enterprise Plan only.

    Adding users to a group

    Once you’ve created groups in your account, you can assign users to them by following these steps:

    1) Navigate to Manage at the top of the page, and select Manage Users

    2) Locate the user by entering their name or email address into the search tool, or by selecting multiple users via the multi-select checkbox.

    users_filters.png

    3) Once you’ve located the user you wish to add to a group, click the ellipses on the right side of their profile icon. You can also access these options on the user’s profile page

    4) Select Add to a Group

    add_to_a_group_option.png

     5) Select the group or groups that you wish to add the user to.

    save_changes.png

    6) Click Save Changes.

     

    Adding users to groups in bulk by selecting multiple users

    To add multiple users to a group, please do the following:

    1. Select the users using the checkbox to the left of their name. 
    2. Once the users are selected, a panel will appear and you can select  ‘Add to group’. 
    3. This will prompt a modal that will allow you to choose which groups to add the users to.

    adding_users_in_bulk.png

    Adding Users to Groups in bulk via CSV import

    Users can also be added to groups via a CSV import. For steps on how to add users to your account and groups in bulk, please click here.

    How to remove a user from a group

    Learn how to remove a user from a group.

    For more information on managing users and groups in your account, please review our Navigating User Management article.

    Read article
  • How to Assign an External ID to Learners in Udemy Business

    This article outlines how organizations can assign and manage an External ID for learners in their Udemy Business account. 

    What is an External ID?

    Udemy Business data export reports contain a column for ‘External ID’ for organizations, which require a unique identifier assigned to learners in addition to their email address. This may also be referred to as an Employee ID or Unique ID.

    How to assign an External ID

    Organizations that configure Single-Sign-On (SSO) for their account can assign and manage the External ID for learners from directly within their Identity Provider (IdP). Please note: Okta automatically populates the externalID attribute field with the Okta User ID. If you wish to persist your own unique user IDs then you can complete this on Okta by following this article, Setup SSO, and mapping your Udemy external ID attribute.

    If your organization does not have SSO configured and needs to have an External ID applied to learners in your account, please contact our Support Team so we can assist.

    Read article
  • How to Configure Automatic Provisioning (SCIM) in Okta for Existing Udemy Business Customers

    This guide provides the steps required for existing Okta and Udemy Business customers to configure automatic provisioning, deprovisioning, profile updates and group management of Udemy Business using System for Cross-domain Identity Management (SCIM 2.0).

    Notes:

    • If you already have SSO sign on enabled from the previous Udemy Business app you do not need to reconfigure SSO again, just look for the Provisioning tab under Applications in Okta to set SCIM up. 
    • If you had SSO set up from a manual configuration by one of our team, you should add our new Udemy Business app into your Okta account. You will find this in Applications by searching for Udemy Business. Because this is a new version of our app in Okta, existing customers might be required to reconfigure Single Sign On (SSO) before enabling SCIM Provisioning. (step by step instructions below)
    • Users provisioned through Okta will not take up a license until they log into the Udemy Business application for the first time. 
    • SCIM provisioning changes can only be synced from Okta to Udemy Business, not the other way round. 
    • Users and Groups managed by SCIM in Okta cannot be changed within the Udemy Business app - SCIM is the single source of truth for user and group data.

    Contents

    • Features
    • Requirements
    • Configuration Steps
    • Schema Discovery
    • Troubleshooting Tips

    Features

    The following provisioning features are supported:

    • Identity Provider (IdP) Initiated SSO
      • Users will be able to initiate the login process from their Okta dashboard
    • Service Provider (SP) Initiated SSO
      • Users will be able to access [your-subdomain.udemy.com] and initiate the login process their Udemy Business login page.
    • Just in Time (JIT) Provisioning
      • Users authenticated through SSO will be provisioned to Udemy Business on their first login.
      • All user attributes which are configured to be sent will be updated whenever the user logs in. This does not apply to SCIM users since they are only managed by SCIM.
    • Push Users with Ahead of Time Provisioning (SCIM)
      • New users associated with Udemy Business app on Okta will be created on Udemy Business.
    • Push Profile Updates (SCIM)
      • Updates made to the user's profile through Okta will be pushed to Udemy Business for users that are associated with the Udemy Business on Okta.
    • Push User Deactivation (SCIM)
      • Deactivating the user or disabling the user's access to the application through Okta will deactivate the user on Udemy Business and remove them from all groups.
      • Note: For Udemy Business, deactivating a user means removing access to login, but maintaining the user's information on Udemy Business as a deactivated user.
    • Reactivate Users
      • User accounts can be reactivated on Udemy Business by reassigning the app to that user through Okta.
    • Group Push (SCIM)
      • Groups and their memberships will be pushed to Udemy Business. Manage groups is limited to groups pushed originally from Okta as we do not send information of groups created on Udemy Business.

    Configuration Steps

    1 - To get started, log into your Udemy Business account and go to the User Access page from Manage > Settings > Single Sign-On (SSO).

    Click Start setup. Choose your Identity Provider and follow the instructions from there to enable SCIM, and generate your credentials for inputting into your Identity Provider, as part of the configuration process.

    start_setup.png

    2 - From your Okta's Dashboard, use the top menu to access the Applications page.

    3 - Click on the button Add Application, search for Udemy Business and click Add.

    add_ub_as_application.png

    4 - Adding Udemy Business app will redirect you to the Application General Settings - Required page as shown below.

    general_settings.png

    5 - Add the Audience URI (SP Entity ID) value below into the corresponding field and click Done. 

    d905a6ca-adf9-45e2-9b9d-0d6485f27206

    Note: 

    • If you already have SSO login enabled from the previous Udemy Business app you do not need to reconfigure SSO again, proceed to step 8. 
    • If you had SSO set up from a manual configuration by one of our team, you should reconfigure SSO with the new app.
      • You can avoid any SSO downtime by hiding the Udemy Business tile in your Okta dashboard until the new SSO and SCIM configuration is complete. 
      • Beside Application Visibility click ‘Do not display application icon to users’

    6 - Click on Sign On tab to start the SSO configuration. 

    7 - Click on Identity Provider metadata, save the metadata file or copy the metadata URL with your organization's metadata. 

    Access the SSO section of your Udemy Business account. On the configuration page, choose the appropriate metadata configuration method, and follow the instructions to create the SSO connection with your Identity Provider and Udemy Business.

    sso_okta_connection.png

    8 - To enable automatic Provisioning (SCIM) click on the tab Provisioning and Configure API integration.

    configure_api_integration.png

    9 - Click on Enable API integration and add your subdomain, CLIENT_ID as username, and SECRET_ID as password

    [You can generate or view these credentials in your Udemy Business account by accessing the Provisioning (SCIM) page under Settings.]

    test_api_credentials.png

    10 - Click on Test API Credentials and you should see a message indicating that you’ve successfully completed your SSO integration. If not, please send a message to the Udemy Business Support Team with the given error message.


    11 - Click on Save and you will be redirected to the Application Provisioning configuration page.


    provisioning_to_app_save.png

    12 - On To App link click on Edit to enable individual features. To use all the capabilities we recommend to enable Create Users, Update User Attributes and Deactivate Users on this page.

    provisioning_to_app_edit.png
    13 - Click on Save

    14 - Click on the Assignments tab to assign Udemy Business to single users or entire groups. Assigned users will be automatically provisioned after being added, automatically modified when changes are made to their profiles, and automatically deactivated when they are removed from assignments.

    15 - Click on the Push Groups tab to send groups and their membership information to Udemy Business.

    push_groups_to_ub.png
    16- Click on + Push Groups and select the groups you want to push to Udemy Business.

    You will be able to select each group, or you can create an automatic rule.

    find_groups_ub.png
    17 - Select the group search criteria and fill the requested information for the groups you would like to send information to Udemy Business.

    push_groups_by_name.png

    18 - After selecting the group, check Push group memberships immediately to send not only the group but the members within the group as soon as you select the group, and click on Save.

    19 - Follow the previous steps for groups selection for all groups you would like to send to Udemy Business.

    Note: After Okta sends User or Group information to Udemy Business, we will consider Okta as the source of truth, and will not allow changes to user profiles or groups on Udemy Business.

    Read article
  • How to Configure a Custom SSO Connection

    This article outlines how to configure single sign-on (SSO) for any learning management system that supports SAML2.0 SSO.

    LMS SSO Setup

    Steps on how to integrate the learning management systems below, with Udemy Business, are also available in our Help Center.

    How to configure SSO
    Pre-requisites

    1. Download the Udemy Business SSO Metadata file.

    2. You are an Admin within your Udemy environment.

    Part 1 - Setting up Udemy Business as a Service Provider

    For specific instructions in establishing a SSO connection in your system we recommend consulting your documentation

    3. Use the provided UB metadata file to configure SSO within your Identity provider by saving the file or copying the URL. This process differs per identity provider so please refer to the particular Identity provider article for details.

    4. Confirm SAML configuration values:

      • Entity ID: PingConnect
      • ACS URL: https://sso.connect.pingidentity.com/sso/sp/ACS.saml2
      • Logon/Base URL: Your Udemy Environment URL.({company}.udemy.com)
      • X509 Certificate: Found in our file

    5. Confirm SAML attributes. Identity providers often provide these by default but you may wish to edit these attributes.

    Required attributes

    • email : the unique email of the user 

    Optional attributes

    • firstName : the first name of the user
    • lastName : the last name of the user
    • groups : the list of groups to which the user belongs
    • externalID : a unique user ID specified by the customer

    6. Download the Metadata file from your system

    Part 2 - Configuring Udemy

    1. Login to Udemy Business

    2. Manage > Settings > Single Sign-On (SSO) > Start setup, and select Custom.

    manage_sso.png

    3. Connection Name: This can be anything (e.g. CSOD SSO).

    4. Import the Metadata via URL or from the file you previously downloaded from your system.

    5. Confirm Configuration

      • Verify that all parameters are correct for your environment.

    select_file_sso.png

     

    6. Save. A banner will display in the lower right if the settings are successfully applied.

     

    sso_complete.png

    Your SSO Configuration is complete!

    Read article
  • How to Configure SSO in Azure AD for Udemy Business

    This guide provides the steps required to configure Single Sign-On (SSO) using Security Assertion Markup Language (SAML 2.0) for Udemy Business.

    Existing Azure AD and Udemy Business customers who wish to enable SCIM Provisioning in Azure AD should use this configuration guide.

    Udemy Business SAML Metadata for Azure AD is linked here.

    Learn how to configure advanced SSO settings on an organizational level.

    Notes:

    • Single sign-on and provisioning are available to Udemy Business Enterprise Plan customers.
    • Users provisioned through Azure AD will not take up a license until they log into the Udemy Business application for the first time. 
    • SCIM provisioning changes can only be synced from Azure AD to Udemy Business, not the other way round. 
    • Users and Groups managed by SCIM in Azure AD cannot be changed within the Udemy Business app - SCIM is the single source of truth for user and group data.
    • You can still create groups manually in Udemy Business if you have users that you don’t need or want to push from Azure AD, eg. contractors or temporary staff.

    1. Configure Single Sign-On (SSO) with Azure

    Log in to your Azure portal and click Azure Active Directory.

    1.png

    Next, select Enterprise applications.

    2.png

     Now click + New application in the top bar.

    3.png

     Select Non-gallery application.

    4.png

    Enter a name for the new application and click Add at the end of the window.

    5.png

    Then select Set up single sign on. 6.png

    For Single Sign-on mode, select SAML based Sign-on.

    7.png

    Follow the 4 steps on the SSO with SAML screen. Azure AD has also provided a detailed configuration guide at the top of the page for further guidance.

    saml_based_sign_on.png

    For Step 1, Basic SAML Configuration:

    9.png

    For Step 2, User Attributes and Claims:

    In the User Identifier field, enter user.mail.

    Udemy Business supports the following SAML attributes 

    Please note: all attributes are space and case sensitive and do not include the colon.

    Required attributes

    • email : the unique email of the user 

    Optional attributes 

    • firstName : the first name of the user
    • middleName : the middle name (if any) of the user
    • lastName : the last name of the user
    • displayName : the fully formatted name of the user
    • Name ID : an identifier that can be used in cases where a name is duplicated
    • groups : the list of groups to which the user belongs
    • externalID : a unique user ID specified by the customer
    •  

    To change each attribute, click on the respective row.

    Enter the attribute name as specified in the table above, select the corresponding value and remove Namespace value (leave it blank) and click OK.

    To add more attributes to your SAML assertion, click Add attribute and repeat the process.

    10.png 

    Once you’re done adding the attributes, click Save to complete the configuration.

    For Step 3, in the SAML Signing Certificate section, copy the App Federation Metadata URL or click Download Federation Metadata XML, which will export the Metadata file.

    Access the Single Sign-On (SSO) tab of your Udemy Business account. Click Start setup and choose your Identity Provider. On the configuration page, choose the appropriate metadata configuration method and follow the instructions to create the SSO connection with your Identity Provider and Udemy Business.

    sso_settinngs.png

    Click on Azure Active Directory.

    12.png

    Select Enterprise applications.

    13.png


    Select your newly created application from the list.

    Click Users and groups.

    14.png

    Click on Add User -> Users and Groups

    Select all users you want to add to the application and click Select.

    15.png 

    You have now completed configuring SSO for Udemy Business with Azure AD.

    Read article
  • How to Configure SSO in Okta for Udemy Business

    This guide provides the steps required to configure Single Sign-On using Security Assertion Markup Language (SAML 2.0) and Provisioning using System for Cross-domain Identity Management (SCIM 2.0)  for Udemy Business.

    Existing Okta and Udemy Business customers who wish to enable SCIM Provisioning in Okta should use this configuration guide.

    Learn how to configure advanced SSO settings on an organizational level.

    Notes:

    • Single sign-on and provisioning are available to Udemy Business Enterprise Plan customers.
    • Users provisioned through Okta will not take up a license until they log into the Udemy Business application for the first time. 
    • SCIM provisioning changes can only be synced from Okta to Udemy Business, not the other way round. 
    • Users and Groups managed by SCIM in Okta cannot be changed within the Udemy Business app - SCIM is the single source of truth for user and group data.

    Contents

    • Supported SAML attributes
    • Configuration Steps

    Features

    Learn more about the provisioning features that are supported through single sign-in (SSO) with Udemy Business. 

    Udemy Business supports the following SAML attributes 

    Please note: all attributes are space and case sensitive and do not include the colon.

    Required attributes

    • email : the unique email of the user 

    Optional attributes 

    • firstName : the first name of the user

    • middleName : the middle name (if any) of the user

    • lastName : the last name of the user

    • displayName : the fully formatted name of the user

    • Name ID : an identifier that can be used in cases where a name is duplicated

    • groups : the list of groups to which the user belongs

    • externalID : Okta automatically populates the externalID attribute field with the Okta User ID. If you wish to persist your own unique user IDs then you can complete this on Okta by following this article, Setup SSO, and mapping your udemy external ID attribute.

    Configuration Steps

    1a - To get started, log into your Udemy Business account and go to Settings > Single Sign-On (SSO). Click Start setup, choose your Identity Provider from the list and follow the instructions to configure SSO and input your Identity Provider Metadata to automatically create the SSO connection with Udemy Business.

    sso_settinngs.png

    1b - While still within your Udemy Business account you can access the necessary details to set up SCIM Provisioning which automates user and group management. 

    Access the tab under SSO called Provisioning (SCIM). Click Start setup, choose your Identity Provider and follow the instructions from there to enable SCIM and generate your credentials for inputting into your Identity Provider as part of the configuration process.

    2 - From your Okta's Dashboard, use the top menu to access the Applications page.

    3 - Click on the button Add Application, search for Udemy Business and click Add.

    add_udemy_business.png

    4 - Adding Udemy Business app will redirect you to the Application General Settings - Required page as shown below.

    ub_general_settings.png

    5 - Add the Audience URI (SP Entity ID) value below into the corresponding field and click Done.

    d905a6ca-adf9-45e2-9b9d-0d6485f27206

    6 - Click on Sign On tab to start the SSO configuration.

    7 - Click on Identity Provider metadata, save the metadata file or copy the metadata URL with your organization's metadata. 

    Access the SSO section of your Udemy Business account again, and on the configuration page, choose the appropriate metadata configuration method and follow the instructions to create the SSO connection with your Identity Provider and Udemy Business.

    select_file.png

    8-  Click Save setup, SSO setup is now complete!

    verified.png

    For SP-initiated SSO

    1- Go to https://[your-subdomain].udemy.com

    2- Click on Continue with SSO

    continue_with_sso.png 

    If you wish to continue and set up SCIM Provisioning in Okta please use this configuration guide.

    Read article
  • How to Configure SSO in OneLogin for Udemy Business

    Udemy Business supports federated authentication via SAML 2.0-based Single Sign-On (SSO). When SSO is enabled, enterprise customers will be able to manage employee authorization and authentication to their Udemy Business learning site from their corporate identity system. 

    This article will cover all the key steps to add and configure Udemy Business SSO for OneLogin. You may, however, also want to refer to this OneLogin article regarding configuring apps for additional details.

    Learn how to configure advanced SSO settings on an organizational level.

    Features

    Learn more about the provisioning features that are supported through single sign-in (SSO) with Udemy Business.

    Udemy Business supports the following SAML attributes

    Please note: all attributes are space and case sensitive and do not include the colon.

    Required attributes

    • email : the unique email of the user 

    Optional attributes 

    • firstName : the first name of the user
    • middleName : the middle name (if any) of the user
    • lastName : the last name of the user
    • displayName : the fully formatted name of the user
    • Name ID : an identifier that can be used in cases where a name is duplicated
    • groups : the list of groups to which the user belongs
    • externalID : a unique user ID specified by the customer

    Steps to Configure Udemy Business and Onelogin:

    1. Add Udemy Business app from the OneLogin app catalog
    2. Download SAML metadata (to upload into your Udemy Business account)
    3. Upload OneLogin SAML metadata to Udemy Business account
    4. Assign users to the Udemy Business application in OneLogin

    Step 1: Add Udemy Business app from the OneLogin app catalog

    Start by navigating to Applications > Add App in the OneLogin administrator dashboard. Next, search for “Udemy Business” in the App Catalog.

    one_1.png
    Select Add App:

    one_2.png

    Search for and click Udemy Business:

    applications.png
    Click on Save to add the application:

    save_application.png

    Navigate to the Configuration tab and enter in your Udemy Business subdomain and then save. For example, if your company name is Acme Co. and your Udemy Business domain is https://acmeco.udemy.com, you would enter acmeco into the text field:

    configuration_tab.png

    Step 2: Download SAML metadata (to input into your Udemy Business account)

    Still in the Udemy Business Application tab from the previous step, navigate to the More Actions button:

    one_6.png

    And click the SAML Metadata button to download the SAML Metadata file. Save the file for the next step:

    one_7.png

    Step 3: Upload OneLogin SAML metadata to Udemy Business account (Note: For this step you will need Udemy Business Admin access)

    In your Udemy Business account, navigate to Manage > Settings > Single Sign-On (SSO):

    settings.png

    Select the Single Sign-On tab from the left hand menu.

    Click the Start setup drop down and select OneLogin:

    one_login.png


    Add a Connection Name, select the OneLogin Metadata file from the last step, and click Save:

    connection_name.png

    Step 4: Assign users to the Udemy Business application in OneLogin

    Back in your OneLogin account, in the Access tab and Users tab, configure the users’ access for the newly created app, either by adding Udemy Business app to a role (recommended), or adding the app to a specific user. Please see OneLogin's article regarding how to assign users to applications

    user_provisioned.png

    You have now completed configuring SSO for Udemy Business with OneLogin.

    Users or roles which have been added to the Udemy Business account should now successfully be able to login and authenticate via OneLogin SSO!

    Additional information about OneLogin is available in the OneLogin Knowledge Base.

    SSO is set up so you can also configure SCIM provisioning in OneLogin with Udemy Business. This will allow you to provision, deprovision, create groups, manage group membership and change user profile details like name and email address in OneLogin. Any changes made within OneLogin will automatically update Udemy Business and other applications you have set up via this mechanism so you can manage your users in one place.  

    You do not need to update both OneLogin and Udemy Business separately with these actions as it will all be synced from OneLogin. Learn more about configuring SCIM provisioning with OneLogin.

    Read article
  • How to Configure SSO With ADFS

    In this tutorial we will configure ADFS with Udemy Business using the metadata from ADFS.

    Udemy Business SAML Metadata for ADFS is linked here.

    Learn how to configure advanced SSO settings on an organizational level.

    Features

    Learn more about the provisioning features that are supported through single sign-in (SSO) with Udemy Business.

    Configuring ADFS

    1. Launch the ADFS 2.0 console. 

    adfs_start.png

    2. Under Trust Relationships > Relying Party Trusts, add a new Relying Party Trust. This will launch the wizard shown below.

    2.png 

    3. Next, you will be prompted to import the Udemy Business Metadata file. Udemy Business SAML Metadata for ADFS is linked here.

    3.png

    4. Enter a name for the connection, for example Udemy Business. 

    4.png

    5. On the Choose Issuance Authorization Rules step, select Permit all users to access this relying party.

    5.png

    6. Click Next to view the summary and complete the wizard.

    6.png

     7. Leave the “Open the Edit Claim Rules…” option checked and finish the wizard.

    image7.png

    8. This will launch the Edit Claim Rules configuration utility.

    8.png

    9. This example will only gather claims from Active Directory to present to Udemy Business. 

    9.png

    10. Configure a basic claim set.

    Udemy Business supports the following SAML attributes (all attributes are space and case sensitive).

    Required attributes

    • email
      the unique email of the user 

    Optional attributes 

    • firstName
      the first name of the user
    • middleName
      the middle name (if any) of the user
    • lastName
      the last name of the user
    • displayName
      the fully formatted name of the user
    • Name ID
      an identifier that can be used in cases where a name is duplicated
    • groups
      the list of groups to which the user belongs
    • externalID
      a unique user ID specified by the customer

    10.png

    11. Once you’ve configured the claims, back on the ADFS 2.0 Relying Party Trusts window, right-click the newly created connection and view the properties for the connection. Navigate to the Encryption tab and Remove the encryption certificate.

    11.png

    12. That will complete the ADFS configuration. Next, you should download the metadata and input it into your Udemy Business account to create the SSO connection.

    You can find the Metadata file by inputting your server name and linking to the below:

    https://<ADFS server name>/FederationMetadata/2007-06/FederationMetadata.xml

    Access the Single Sign-On (SSO) tab of your Udemy Business account. Click Start setup and choose your Identity Provider. On the configuration page, choose the appropriate metadata configuration method and follow the instructions to create the SSO connection with your Identity Provider and Udemy Business.

    sso_settinngs.png

    Read article
  • How to Configure SSO With G Suite

    In this tutorial, we will configure G Suite (formerly known as Google Apps for Work). 

    Udemy Business SAML Metadata for G Suite is linked here.

    Learn how to configure advanced SSO settings on an organizational level.

    Features

    Learn more about the provisioning features that are supported through single sign-in (SSO) with Udemy Business.

    Locating Your SaasID

    To configure G Suite you will need your SaasID. This value will be provided by Udemy and it is going to be the sub domain to access udemy, e.g. the yoursubdomain where Udemy Business full address is yoursubdomain.udemy.com.

    In addition to your SaasID, you will also need the following parameters to configure G Suite.

    Creating a New SAML Application in G Suite

    The steps below outline how to create a new SAML application in G Suite.

    1. Log into G Suite for Work Admin Console.
    2. Navigate to Apps > SAML Apps.
    3. Click Add a service/App to your domain.
    4. Choose Setup My Own Custom App, and click Next.
    5. Enter the Application Name and Description, upload a logo if desired, and click Next.
    6. Enter the ACS URL and Entity ID fields with the information given above.
    7. Leave Start URL blank if users will only be accessing Udemy Business directly from the account URL (i.e., yoursubdomain.udemy.com). If your users will be accessing Udemy Business from G Suite, then you will need to apply the following value for the Start URL: https://pingone.com/1.0/d905a6ca-adf9-45e2-9b9d-0d6485f27206
    8. The NameID will automatically be set to the Primary Email address so leave it at that. Click Next.
    9. If your application requires additional attributes, you can add them in this section. If not, click Finish.
    10. Click OK to complete the wizard.
    11. By default, new applications are OFF for all users. Click the menu icon and choose ON for Everyone.

    sso_1.png

    Once the SAML application is created, you will need to configure attributes that are going to be sent in the SAML assertion.

    Udemy Business supports the following SAML attributes 

    Please note: all attributes are space and case sensitive and do not include the colon. Required attributes

    • email : the unique email of the user 

    Optional attributes 

    • firstName : the first name of the user
    • middleName : the middle name (if any) of the user
    • lastName : the last name of the user
    • displayName : the fully formatted name of the user
    • Name ID : an identifier that can be used in cases where a name is duplicated
    • groups : the list of groups to which the user belongs
    • externalID : a unique user ID specified by the customer

    Finally, you will need to generate a metadata file for the newly created SAML application and enter it into your Udemy Business account to create the SSO connection. 

    Access the Single Sign-On (SSO) tab of your Udemy Business account. Click Start setup, choose your Identity Provider and on the configuration page choose the appropriate metadata configuration method. Then follow the instructions to create the SSO connection with your Identity Provider and Udemy Business.

    sso_settinngs.png

    Please note: when adding a new SAML application in G Suite, it might take up to 24 hours for the process to be completed.

    Read article
  • How Group Admins Can Add Users to a Group

    Group admins have the ability to add users to groups that they manage, so long as that user already has a Udemy Business license.

    This article outlines the steps that group admins can take to add users to groups that they manage.

    If you are an admin, learn how you can add users to groups.

    Important: groups and group admins are only available to Enterprise Plan accounts.

    How to add a user to a group

    Add users to groups that you manage by following the steps below:

    1) Navigate to Manage at the top of the page, and select Manage users.

    2) Select Manage Groups on the left hand side of the page, or search for the group using the search bar.

    find_a_group.png

    3) From the Manage Groups page, select the group you wish to add the user to from the list of groups that you manage. If you searched for the group in Step 2, then select the group from the results.

    4) Select the ‘Add user by email or name...’ option at the top of the group list.

    search_or_add_user_to_a_group.png

    5) Type in the name or email of the user you wish to add to your group

    6) Select the user from the list to add them to the group.

    Important: please remember that the user will need to already have a license within your Udemy Business account, otherwise they will need to be invited to join the account.

    Group admins with Invite permissions will see an option to Invite users at the bottom of the dropdown results, however, group admins without invite permissions will not have this option.

    Learn more about the various actions that group admins can take in Udemy Business accounts.

    Read article
  • How to Format Files For CSV Imports

    This article outlines how admins should format CSV files that can be used to add or manage users into your Udemy Business account, via our import feature. 

    Please note: 

    • The CSV import feature is not available to group admins.
    • Currently the CSV template is only available in English.

    How to encode a CSV in UTF-8 format

    CSV files must be encoded in UTF-8 format in order for the import to work. 

    In Microsoft Excel (PC):

    1. Select “Save as”> “Browse”. 
    2. The “Save as” window should now appear. Save as type as “CSV (Comma delimited) (*.csv)”
    3. Under the Tools drop-down box, click “Web Options”. A new window for web options will appear.
    4.  Under the “Encoding” tab, select “UTF-8".
    5. Click “OK” and save the file.

    Please note: Excel for Mac does not natively support the import or export of UTF-8 encoded files. As a result, we recommend Mac users open a spreadsheet in Google Sheets and follow the steps below to encode the CSV file in UTF-8 format.

    In Google sheets:

    1. Click “File”> “Download”.
    2. Select “Comma-separated-values (csv.)”. 
    3. The sheet will be downloaded in UTF-8 format.

    Possible formatting issues caused by region & language settings in Microsoft Excel

    Depending on the regional or language settings you’re using in Microsoft Excel, you may need to make some additional formatting changes. More information is available in Microsoft's Support Center

    Please note: the two most commonly seen issues related to this are:

    • Regional settings for the web: the delimiter is not set to comma in the default setting.
    • Encoding files with Japanese/Chinese/Korean characters. MS Excel does not encode these files as UTF-8 correctly.

    Another way to ensure your CSV file can upload correctly, when encountering these issues, is to save your file in Google Sheets or Notepad and download it as a CSV. 

    • Google will automatically correctly encode the file as UTF-8 when downloaded.
    • On Notepad, be sure to save the file under the type “Unicode (UTF-8). 

    Formatting your CSV file

    CSVs can define the email, role, and group(s) for users. There are some standard formatting requirements you need to adhere to for your CSV file to upload successfully.

    • The header row of the CSV must contain: email, role, groups and group admin for. 
    • The valid roles that you can assign a user to are “user” or "admin". Enterprise plan users can also assign the "group admin" role (see below).
    • Any blanks within the role column will be automatically set to “user” if the user is new. If you leave the role column blank for existing users, their role will remain the same, i.e. if the user is an admin, they will still be an admin.
    • The "groups" and "group admin for" columns can be left blank.
    • The column titles and roles (e.g. group admin, admin) in the role column must be entered in English. The values (terms) in other cells, however, can be localized. Please note that group names can be localized provided they match the group names that have been created in your organization’s account.

    Group formatting - Enterprise Plan only

    • Group names you assign users to must match existing group names you have already setup in your Udemy Business account through the User Management feature.
    • Group names you assign users to must already exist within your Udemy Business account.
    • The "groups" and "group admin for" columns can be left blank if applicable.
    • Do not add the owner of the account in the CSV file, as you will receive an error message stating that you cannot change the role of the owner. Please contact Support if you would like to change the owner of your account. 
    • If you add an email which is in Pending Invitations, that user will not be included in the number of new users added when you receive a successful upload message, because they had been previously invited.
    • Group names and email address are not case sensitive nor space sensitive.
    • You can include multiple group names for each user by separating group names with a semicolon “;” character. Please be sure, however, there are no spaces between the groups and the semicolon that separates them (i.e. Marketing;Sales;New Hires).

    email

    role

    groups

    group admin for

    jane@example.com

    admin

    senior staff

     

    joe@example.com

    user

    marketing;new hires

     

    bob@example.com

    group admin

    sales

    sales

     

    Read article
  • How to Make a User a Group Admin

    Group Admins help drive effective learning engagement across an organization. We believe the best learning happens when team managers or those closest to the learning goals of  employees can help drive learning forward. The Group Admin feature enables team leads and managers to connect learners with the right course for their professional development. Group Admins can also see reporting and insights for their groups, assign courses within their groups, manage the users in their groups, and invite new users if they have the permissions to do so.

    Please note that Group Admin functionality is only available in the Enterprise plan.

    How do you make someone a Group Admin?

    1. Go to Manage › Manage Users
    2. Select the User you’d like to make a Group Admin
    3. Click the ellipses and then Edit Role
    4. Select Group Admin and click Allow User to Invite and Deactivate Users Within the Groups They Manage if you wish to grant them this permission
    5. Select the Groups the user will be a Group Admin for
    6. An email will automatically be sent notifying the user of their new role

    If you need to edit or remove a user’s group admin privileges, you can do so by following the same steps outlined above. All actions involving adding and removing members from a group will be logged in a “Group Membership Log’, which is accessible and downloadable by Group Admins and Admins (see below for more details).

    • Groups can have multiple Group Admins.
    • Only Admins can designate users as Group Admins.
    • Admins can create Group Admins in bulk via CSV upload.
    • Admins can choose whether to allow Group Admins to invite and deactivate users in the groups they manage
    • Admins can change a role when that status of an invitation is still pending

    For more information on group admins and permissions that can be enabled for them, please click here.

     

    Read article
  • How to Remove Users From a Group

    This article explains how admins or group admins can remove users from groups that have been created in your Udemy Business account.

    Please note: groups are available with the Enterprise Plan only.

    How to remove a user from a group

    To remove a user from a group follow the steps below:

    1. Navigate to Manage at the top of the page, and select Manage users.
    2. Search for the user by name or email address to bring them up in the All users list.
    3. Click the ellipses icon on the right-hand side of their profile and then Edit Groups Membership.
    4. Click the box to the left of the group(s) you wish to remove the user from (so that the checkmark is removed).
    5. Next, click Save Changes.

    How to remove multiple users from a group

    To remove multiple users from a group, please do the following:

    1. Navigate to Manage at the top of the page, and select Manage users.
    2. Click Manage Groups and select the group from the list, or use the search option on the left hand side of the page.
    3. Select multiple users using the checkbox to the left.
    4. You can then remove those users from the group by clicking Remove from group.

    To add the users to another group, select the applicable users and then click Add to another group.

    removing_multiple_users_from_a_group.png

    For more information on managing users and groups in your account, please review our Navigating User Management article.

    Read article
  • How to Replace Your SAML Signing Certificate for SSO Configured Accounts

    This article explains how Admins can replace the Security Assertion Markup Language (SAML 2.0) Signing Certificate for Single Sign-on (SSO) configured, Udemy Business accounts. 

    How to update an SSO certificate in Udemy Business

    You can replace your SAML Signing Certificate in your Udemy Business account, by using our self-serve settings. 

    1. Access Manage > Settings > Single Sign-On (SSO). 
    2. Use the Replace Certificate link to upload a new SAML Signing Certificate, which is provided by your Identity Provider.
    3. Replace the certificate in your Identity Provider once it’s been updated in Udemy Business. 

    Note: please update your SAML Signing Certificate in Udemy Business first, before updating it in your Identity Provider. This will help ensure a certificate mismatch from occurring, which would prevent your team from being able to access your Udemy Business account.

    upload_certificate.png

    Read article
  • How to use our SCIM API to Automate User & Group Management

    Overview

    SCIM System for Cross-Domain Identity Management is a standard API for automating user and group provisioning/deprovisioning, and updating user and group data from the customer’s Identity Provider (IdP) into the Udemy Business account. SCIM is supported by a number of Identity Providers such as Okta, Azure AD, and OneLogin but you can also write your own tools to make use of the Udemy Business SCIM API. 

    SCIM uses a standardized REST API with data formatted in JSON. Udemy Business supports version 2.0 of the SCIM standard. The API is available for all customers that are on the Enterprise plan.

    Udemy Business SCIM API supports the following features: 

    • Provisioning users
    • Deprovisioning users (deactivation)
    • Changing email addresses
    • Changing user details
    • Provisioning groups
    • Adding/removing users to groups

    SCIM protocol description

    SCIM Protocol is an application-level REST protocol for provisioning and managing identity data on the web. The protocol is client-server where the client is the Identity Provider (IdP) and the server is Udemy Business.

    The basic flow is:

    • When access to Udemy Business is granted to the user in the IDP by the customer, the IdP sends us a request to check if the specific user exists in our database. They issue a User search request by an attribute like userName or email.
    • If the user does not exist, the IdP sends a request to create a user.
    • If the user exists, the IdP sends an update request for the user.
    • When access to Udemy Business is revoked, the IdP sends us a request to deactivate the user from our database.
    • IdP can also send requests to change user details.

    How to access the API?

    In order to obtain the authorization credentials to connect to the SCIM API, you will have to set up SCIM integration via Manage -> Settings -> Provisioning (SCIM) page in your Udemy Business account. Note that only Admins have access to this page. 

    Click Start Setup.

    1.png
    In the next step, select Other from the Choose Provider dropdown.

    2.png

    3.png

    4.png

    Click Generate token.

    5.png
    On this screen, click Copy to copy the Bearer token to the clipboard.

    You will need to include Authorization HTTP header with the Bearer token in your requests, for example:

    GET /scim/v2/Users HTTP/1.1

     Host: myorganization.udemy.com

     Accept: application/scim+json

     Authorization: Bearer <enter you Bearer token here>

    Content-Type: application/scim+json

    Udemy Business SCIM API uses the HTTP protocol and is only available over a secure HTTPS connection.

    The base URL for the API is https://<organization>.udemy.com/scim/v2/

    If you are developing an application to interact with the Udemy Business SCIM API, it is recommended to refer to the SCIM RFCs included at the end of this document. Udemy Business SCIM API implementation is compliant with the standard.

    SCIM API Endpoints

    Informational Endpoints

    These endpoints are information and serve to configure the clients. They do not require authentication, so you don’t need to include the Authorization header when accessing these endpoints.

    GET /ServiceProviderConfig

    Returns details about Udemy Business SCIM implementation including which methods are supported.

    GET /Schemas

    Returns information about the schemas that our SCIM implementation supports. Supported schemas are Users and Groups.

    GET /Schemas/Users

    Returns all attributes that we support for User resources.

    GET /Schemas/Groups

    Returns all attributes that we support for Group resources.

    User Endpoints

    Using these endpoints you can list users, filter by attributes, add new users, update  users’ information, or deactivate/anonymize users. Bear in mind that you will only be able to access users that were created using the SCIM API, users created within Udemy Business will not be available unless you reconcile them through SCIM. More details about reconciliation are given below.

    Supported Attributes

    SCIM attribute

    Required?

    Description

    userName

    Yes

    The userName from the IdP. Must be unique.

    name, { givenName, familyName }

    No

    Given name and family name of the user. Even though they are not required, we recommend always specifying those attributes since it’ll make it easier to identify users.

    emails[type=”work”]]['value’]

    Yes

    Email of the user, must be unique

    active

    Yes

    Flag to deactivate/reactivate users

    title

    No

    User’s job title, i.e. “Senior Engineer”

    externalId

    Yes

    The externalId of the user from IdP. Must be unique.

    Please note: If you specify any other attribute that is not on this list, it will be ignored.

    GET /Users

    Returns a paginated list of users, 12 users per page by default. You can pass in count and startIndex parameters to paginate through the result set. For example:

    GET /scim/v2/Users?startIndex=1&count=100 HTTP/1.1

     Host: myorganization.udemy.com

     Accept: application/scim+json

     Authorization: Bearer <enter you Bearer token here>

    • startIndex is the 1-based index of the first result in the current set of list results (offset)
    • count is the number of resources returned in a list response page (limit). You can retrieve no more than 1000 users in a single request. If this item is omitted it will default to 12.

    GET /Users?filter=

    This endpoint is used to filter users by specific attributes. For example, it is possible to search by userName attribute:

    GET /Users?filter=userName eq "gloria.graynor”

    Note: In the example above, you will need to urlencode the URL parameters so the URL becomes:
    GET /Users?filter=userName%20eq%20%22gloria.graynor%22

    This will return a list of user resources. If there are no results, an empty list will be returned.

    The supported filters are:

    • userName
    • externalID
    • emails[type eq=”work”]

    The supported operators are:

    • and
    • eq

    Response:

    • HTTP status code 200 with the list of entities on success
    • HTTP status code 501 if an unsupported filter is supplied

    POST /Users

    This endpoint is used to create (provision) new users in Udemy Business. 

    The response will contain an id attribute which should be used when referring to this user in all subsequent requests.

    Note that:

    • New users created this way will not consume a license until that user signs in for the first time.
    • If there was an existing pending invitation for this user, it will get used at this point.
      The user will get added to groups, be assigned appropriate role/course assignments according to what is specified in the invitation.
    • An attempt to create a user that already exists in Udemy Business will cause the user to become SCIM managed (displayed with a small link icon in Manage Users pages). Note that user’s status and license usage will not be changed. If the user was active it will remain active and if the user was deactivated it will remain deactivated.

    Response:

    • HTTP status code 201 and the user’s resource on success
    • HTTP status code 409 if the member with the same userName already exists in the Organization
    • HTTP status code 400 with the error details in the response body if the request did not pass validation

    GET /Users/<id>

    This endpoint is used to retrieve user details for a specified user. id parameter in the request above is a unique identifier that was returned when the user was created using SCIM or when listing all existing users.

    Response:

    • HTTP status code 200 with the user resource on success
    • HTTP status code 404 if the user has not been found

    PUT /Users/<id>

    This endpoint is used to replace (overwrite) user details in Udemy Business. If specified, attribute active can be used to deactivate or reactivate the user.

    Response:

    • HTTP status code 200 and the updated user resource
    • HTTP status code 404 if the user doesn’t exist. 
    • HTTP status code 400 in case of an attempt to deactivate an organization owner.

    PATCH /Users/<id>

    This endpoint is used to make partial updates to the user details in our system, meaning that you can use it to change only some attributes of the user. This is in contrast to PUT which replaces the entire user. 

    It can contain attribute active which will cause the user to be deactivated or reactivated.

    • The body of each request MUST contain the "schemas" attribute with the URI value of "urn:ietf:params:scim:api:messages:2.0:PatchOp".
    • The body of an HTTP PATCH request MUST contain the attribute "Operations", whose value is an array of one or more PATCH operations.  Each PATCH operation object MUST have exactly one "op" member, whose value indicates the operation to perform and MAY be one of "add", "remove", or "replace".
    • The “path” attribute can be empty, in this case “value” should be a dictionary in the format of {“path”: “value”}.

    Response:

    • HTTP status code 200 with the updated user’s resource on success
    • HTTP status code 404 if the user was not found
    • HTTP status code 400 if attempting to deactivate an organization owner or in case of an invalid operation.

    Group Endpoints

    Supported Attributes

    SCIM attribute

    Required?

    Description

    displayName

    Yes

    Group title. Must be unique among all Udemy Business groups.

    externalId

    No

    The externalId of the group from the Identity Provider

    Note: If you specify any other attribute that is not on this list, it will be ignored.

    GET /Groups

    This endpoint is used to get a paginated list of all provisioned groups. Include startIndex and count query string parameters to paginate through the results. 

    Bear in mind that only groups created using SCIM will be returned. Groups created from Udemy Business will not be returned.

    GET /Groups?filter=

    This endpoint is used to filter groups by specific attributes. For example, it is possible to search by displayName attribute:

    GET /Groups?filter=displayName eq "Marketing”

    This will return a list of group resources. If there are no results, an empty list will be returned.

    Note that you will need to url encode the parameters, so the request becomes:
    GET /Groups?filter=displayName%20eq%20%22Marketing%22

    The supported filters are:

    • displayName
    • externalId
    • Id
    • member.value

    The supported operators are:

    • and
    • eq

    Response:

    • HTTP status code 200 with the list of entities on success
    • HTTP status code 501 if the non-supported filter is used

    POST /Groups

    This endpoint is used to create (provision) new groups in Udemy Business. 

    Response:

    • HTTP status code 409 If the provisioned group with the same name already exists in the org, we return 409 (Conflict) with a scimType error code of uniqueness.
    • When the group has been created successfully, we return the full representation of the group with HTTP status code 201 (Created) together with the Location header that contains the URL of the create group resource.

    GET /Groups/<id>

    This endpoint is used to fetch the group details from Udemy Business. 

    Response:

    • HTTP status code 200 and a group resource
    • HTTP status code 404 if the group has not been found

    PUT /Groups/<id>

    This endpoint is used to replace the group details in Udemy Business.

    Response:

    • HTTP status code 200 and the updated group resource 
    • HTTP status code 404 if the group doesn’t exist. 

    PATCH /Groups/<id>

    This endpoint is used to make partial updates to group details in Udemy Business. 

    The PATCH endpoint is more tricky than others, as it supports different kinds of operations (and their combinations are possible):

    • replace operation changes the specified value. In our case it’s either group name or members.
    • remove operation removes a member from the group.
    • add operation adds members to the group.

    The rules are the following:

    • We never remove unprovisioned members from the group (in case of `replace` members operation, for example).
    • PATCH request, regardless of the number of operations, SHALL be treated as atomic.

    The input validations are the following:

    • The body of each request MUST contain the "schemas" attribute with the URI value of "urn:ietf:params:scim:api:messages:2.0:PatchOp".
    • The body of an HTTP PATCH request MUST contain the attribute "Operations", whose value is an array of one or more PATCH operations.  Each PATCH operation object MUST have exactly one "op" member, whose value indicates the operation to perform and MAY be one of "add", "remove", or "replace".
    • The “path” attribute can be empty, in this case “value” should be a dictionary in the format of {“path”: “value”}.
    • For “Remove” operation the “members” path is required.
    • For the “Add” operation either “members” or “externalId” “path” should be present.
    • For “Replace” operation “members” path may be present. If it’s not there it means that we are replacing the group details (like group name) but not members.

    Note:

    • Assigning/unassigning users to a group happens asynchronously, so the changes won’t be reflected immediately in Udemy Business.
    • We do not support nested groups, so they will be ignored during this request.

    Response:

    • HTTP status code 204 if the operation was successful.
    • HTTP status code 404 if the group does not exist.
    • HTTP status code 404 with the error details if there is an attempt to assign a group to a user that’s not a member of the organization.
    • HTTP status code 400 with the error details in the response body if the request did not pass the validation

    DELETE /Groups/<id>

    This endpoint is used to remove or deprovision a group in Udemy Business. 

    The rules are the following:

    • If the group contains non-provisioned members, remove provisioned users from the group, delete `OrganizationSCIMGroup` record.

    Response:

    • HTTP status code 204 if the operation was successful.
    • HTTP status code 404 if the group does not exist.

    Further Reading

    Read article
  • Inviting Users

    This article outlines how Udemy Business Admins and Group Admins can invite new learners to join the account, and steps they can take if invitations are not being received.

    How to invite users

    To invite new users, navigate to the Manage tab at the top right of your account and click on Manage Users from the dropdown menu. You can invite users in two ways:

      1. Click the Invite New Users button
      2. Click on Individual email addresses to invite people one by one.
      3. To bulk import users via a CSV import, click on Import users from CSV. Please note: Currently only Admins have access to the CSV import feature.

    inviting_users_.png

    Allowlisting emails

    If your company's firewalls are generally restrictive (certain commonly used sites are blocked), you will need to allowlist certain emails from Udemy Business to ensure delivery of invitation emails and operation of the password reset function. Learn more about allowlisting the email sending domains and subdomains for Udemy Business.

    How do users accept their invitations

    Invited users will receive an invitation via email to join Udemy Business. The subject line of the email will include your company's Udemy Business account name; for example, Invitation to Company's Account. The invitation email will be sent from e.udemymail.com, but the email address of the admin who sent the invite will also be shown before that address. For example, john.smith@company.com via e.udemymail.com.

    After inviting users to your account, an invitation email will automatically be sent to those users. The email will link users to your Udemy Business account, where they’ll enter their name and email, create a password. Users will be prompted to verify their account information, via a verification email with a link, which will expire in one hour*. Once they activate their account through a verification email, they’ll be able to log in for the first time, and start learning. If the user does not respond to the invitation email within 48 hours, the system will automatically send an invitation reminder to them. 

    *Please note that Single Sign-On (SSO)/System for Cross-Domain Management (SCIM) users will not be put through this verification flow.

    send_verification_email.png

    continue_with_sso.png

    Invitations and license usage

    Invitations do not consume a license until the user has signed up for their account. If a license is no longer available by the time the user tries to sign up, the user will land on an error message page. On the error message page they will be asked to contact the administrator who invited them for further assistance.

    What to do if invitations are not being received 

    If your users are not receiving email invitations to join your account, please have them check their spam folders. If they still do not receive any invitation emails, and your organization has allowlisted the Udemy Business emails, please have them contact our Support Team directly for further assistance.

    Pending and resending invitations

    To view the Pending Invitations page, click Pending Invitations at the top left hand of the Manage Users screen.

    On the Pending Invitations page, you can check who has not yet accepted their invite, and resend or cancel an invitation for an individual user by clicking the applicable icon. You can also resend pending invitations to all users at once by clicking Resend All at the top-right hand of the page.

    The name of the inviter will also appear in pending invitations, if they sent individual invitations or uploaded the user's email address in bulk through the CSV import. If you sent the invitation to the user it will read "Invited by me".

    Resending multiple invitations

    To resend multiple invitations, you can select multiple users by clicking the checkbox on the left. Once a selection is made, a panel will appear where you will have the option to resend or cancel multiple invitations.

    resending_invitations_with_multiple_select_feature.png

    Please note: Internet Explorer does not allow copying and pasting from Excel into field 1 of the inviting users tool. Users will need to use Chrome or another browser. 

    Single Sign-On (SSO) accounts

    If you have configured SSO and have enabled auto-provisioning in your Settings for SSO, you can grant users access to Udemy Business in your organization’s Identity Provider. You do not need to invite users one by one within your account, nor do you need to import them through a CSV file.

    If you have auto-provisioning disabled, however, you will need to invite users via the above methods (in addition to provisioning access via your SSO directory).

    SCIM (System for Cross-Domain Management) accounts

    If you have enabled SCIM for provisioning, you can grant users access to Udemy Business in your organization’s Identity Provider and do not need to invite users one by one.  

    Read article
  • Navigating User Management

    Manage who has access to your Udemy Business account. See what courses users are taking, and better understand how people are learning on Udemy Business.

    For Enterprise Plan accounts, the Insights features provide an even deeper view of user activity, and these comprehensive insights can also be viewed for groups of users as well.

    Accessing User Management

    To access user management please follow the steps below:

    1. Log into your Udemy Business account
    2. Click Manage at the top right hand of the page, and then select Manage Users from the dropdown menu

    manage_users_dropdown_menu.png

    Managing Access to Your Udemy Business Account

    Inviting Users

    For steps on how to invite users to your Udemy Business account and resend pending invitations, please click here.

    Removing Users

    For instructions on how to remove and deactivate a user from your account, please click here.

    Managing who can Administer Your Udemy Business Account

    Admins are users who can:

    • Add and remove users from your account.
    • Edit user roles.
    • Access course and user insights (Enterprise Plan only).
    • Create and manage groups (Enterprise Plan only).

    For steps on how to edit a user's role and view which users have admin status, please click here.

    Viewing User Adoption

    The User Adoption Dashboard helps you understand how many, and which users in your organization have logged in to your Udemy Business account and started using it. Find out more.

    See What Your Users are Learning

    Admins can see what courses their account’s users have enrolled in by doing the following:

    1. Locate the user by entering their name or email address in the search tool that’s located under All Users
    2. Click the user’s name to see what courses they have enrolled in as well as their course progress

    user_enrollments.png

    Creating Groups and Reviewing Insights for Your Teams and Departments (Enterprise Plan Users)

    If you have many users in your account, creating groups of users that correspond with teams or departments in your company lets you see adoption, user activity and course insights for those groups.

    Creating, Editing or Removing a Group

    For instructions on how to create, edit or remove a group, please click here.

    Adding And Removing Users From Groups

    For instructions on how to add and remove users from groups, please click here.

    Viewing Insights for a Group (Enterprise Plan Only)

    You can view user adoption, course insights and user activity reports for a specific group. After opening any insights dashboard, use the Group filter located at the top of the page to show data for a particular group.

    Read article
  • Making a User an Admin

    To change a user’s permissions, click the ellipses to the right of the user’s name and select Edit Role. Select Admin and click Save.

    You can also make a user an admin via the CSV import. Please click here for more information.

    edit_role_option.png

    selecting_user_role.png

    Enterprise plan users can also assign Group Admins. For more information on this role please click here.

    How to Check Who is an Admin

    You can check to see who has Admin access by selecting the Admins filter in the dropdown menu at the top of the Manage Users page.

    Read article
  • Removing a User From Your Account - Deactivate User

    If an employee has left your organization, you can remove them from your account and an additional license will be freed up, which can then be utilized by a new employee.

    If you need to remove a user from your account, please follow the steps below:

    1. Select Manage Users from the Manage dropdown menu at the top of the page

    2. Locate the user by entering their name or email address in the Search box that’s located under All Users

    3. To remove a user from your account, click the ellipses (or actions menu) to the right of the user’s name and select Deactivate User. 

    deactivate_user_option.png

    You will be presented with further instructions and information on what it means to deactivate a user before confirming the deactivation.

    deactive_user_confirmation.png

    Once deactivated, the user will no longer be able to log into your Udemy Business account via an email and password login.

    Managing access for users from single sign-on (SSO) managed accounts

    To prevent deactivated users from accessing your Udemy Business account via SSO, please have the team responsible for your SSO integration with Udemy Business, deprovision the users in your SSO Active Directory. Users who remain provisioned via your SSO Active Directory will continue to have access to your Udemy Business account through SSO, even if they are deactivated in the account by an Admin. 

    If you need to prevent deactivated users from accessing your Udemy Business account via SSO, but require that they remain provisioned in your SSO Active Directory, please click here to contact our Support Team for assistance.

    Important: SSO managed accounts that utilize System for Cross-domain Identity Management (SCIM) are only able to deprovision users directly from the SSO Active Directory. For more information, read about automating user and group management with SCIM.

    Deactivated users in Insights and Reports

    For deactivated users, all the data associated with their learning and the use of their account will be retained in your insights and reports. You can access a list of all your Deactivated Users in a filter on the left sidebar menu of the Manage Users area.

    deactivated_users_page.png

    Reactivating users

    If you need to revert a deactivation (eg. made a mistake), or if you wish to have a user returned to the account after being temporarily deactivated, you can use the option to Reactivate User. Learn how to reactivate a user who was previously deactivated.

    Anonymizing users

    If you wish to permanently remove a user’s Personal Identifiable Information (PII) for GDPR compliance or a similar purpose, you can do so once the user has been deactivated.  Learn how to delete a user’s PII.

    Read article
  • Udemy Business Single Sign-on (SSO) Provisioning Features

    This article outlines the provisioning features that are supported through single sign-in (SSO) with Udemy Business. 

    The following provisioning features are supported through SSO:

    Identity Provider (IdP) Initiated SSO

    • Users will be able to initiate the login process from their OneLogin dashboard

    Service Provider (SP) Initiated SSO

    • Users will be able to access [your-subdomain.udemy.com] and initiate the login process on their Udemy Business login page.

    Just in Time (JIT) Provisioning

    • Users authenticated through SSO will be provisioned to Udemy Business on their first login.
    • All user attributes which are configured to be sent will be updated whenever the user logs in.

    Reactivate Users

    • User accounts can be reactivated on Udemy Business.
    Read article
  • What Can Group Admins Do?

    Group Admins help drive effective learning engagement across an organization. We believe the best learning happens when team managers or those closest to the learning goals of employees can help drive learning forward.  The Group Admin feature enables team leads and managers to connect learners with the right course for their professional development. Group Admins can also see reporting and insights for their groups, assign courses within their groups, manage the users in their groups, and invite new users if they have the permissions to do so. 

    Groups can have multiple Group Admins, and Admins can choose whether to allow Group Admins to invite and deactivate users in the groups they manage.

    Please note that Group Admin functionality is only available in the Enterprise plan. 

    Group Admins without invite/deactivate permission set are able to:

    • Assign courses to users and groups, for the groups they manage
    • View learning activity for the users in the groups they manage
    • Add users to the groups they manage, if the user already has a Udemy Business license
    • Remove users from the groups they manage

    Group Admins with invite/deactivate permission set are able to perform all the above actions, plus:

    • Invite new users to the organization via the Invite New Users button, for the groups they manage
    • Invite users in bulk via CSV upload 
    • View pending invitations to groups they manage by going to the Pending Invitations tab
    • View deactivated users in groups they manage by going to the Deactivated Users tab
    • Deactivate users from the organization, through the groups they manage  

    For steps on how to invite users to your Udemy Business account and resend pending invitations, please click here.

    Detailed Group Admin Permissions:

     

    Admins

    Group Admin

    Invite new users to join Udemy Business

    Yes

    Yes: only if they have permission to invite users to groups they manage

    Approve, reject, publish custom courses

    Yes

    Yes

    Make custom course categories

    Yes

    Yes

    Designate other Group Admins

    Yes 

    No

    Import courses

    Yes

    No

    Assign courses to users

    Yes

    Yes

    Assign courses to groups

    Yes

    Yes: only for groups they manage

    Create new groups

    Yes

    No

    Delete groups

    Yes

      No

    Deactivate users from Udemy Business 

    Yes

    Yes: only if they have permission to deactivate users from groups they manage

    Resend or Cancel Pending Invitations

    Yes

    Yes: only if they have permission to invite users to groups they manage

    Edit Group Membership for Pending Invitations

    Yes

    Yes: only if they have permission to invite users to groups they manage

    Add and remove users from groups

    Yes

    Yes: only for groups they manage

    Adding users via the CSV Import feature

    Yes

    Yes: only if they have permission to invite and deactivate users from groups they manage

    See what courses members of their group are taking

    Yes 

    Yes: only for groups they manage 

    View and download the Group Membership Log* see below for more information

    Yes

    Yes: only for groups they manage  

    View and run user adoption, user activity and course consumption reports

    Yes

    Yes: only for groups they manage 

    Edit account settings

    Yes

    No

    Approve email domains  

    Yes

    No

     

    Can Group Admins change their role from Group Admin back to just User?

    • No, you can not edit your own role. A Group Admin will need to reach out to an Admin to edit their role.

    Can Group Admins view information from users outside of the groups they manage?

    • No, Group Admins only have access to users that are in groups they manage

    Can all Group Admins resend pending invites?

    • No, Group Admins can only view and resend pending invites if they have the permission to invite and deactivate users from groups they manage

    Can all Group Admins invite and deactivate users from groups they manage by default?

    • No, Admins will need to select that permission for Group Admins when making someone a Group Admin for a group, or when editing user permissions or roles within groups 

    Who can access the Group Membership Log?

    • Admins can access the Group Membership log for all groups. Group Admins can only access the Group Membership Log for the groups that they are Group Admins for. For more information on the Group Membership Log, please click here.
    Read article