Single Sign-on (SSO) Provisioning

Udemy Business supports Single Sign-On (SSO) with any provider that supports SAML2.0.

Udemy Business admins can independently enable SSO for your organization’s Udemy Business account and manage the integration moving forward as required. In addition, we provide a number of optional settings, which can be used to customize your SSO configuration.

Core Features

• Identity Provider (IdP) Initiated SSO
• Users will be able to initiate the login process from their SSO dashboard
• Service Provider (SP) Initiated SSO
• Users will be able to access [your-subdomain.udemy.com] and initiate the login process.
• Just in Time (JIT) / Auto-Provisioning
• Users authenticated through SSO will be provisioned to Udemy Business on their first login.
• Please note: JIT-provisioned users will not receive an automatically-generated email invite to claim their Udemy Business license as they would if they were manually invited through the Udemy Business user management portal. We recommend your learning team send out a separate communication explaining how they can get access by logging in via their SSO provider.
  
• Reactivate Deactivated Users
• Assign Users to Groups in Udemy Business
• Users can be assigned to Udemy groups via SSO.  
• Please note: The group must already exist within Udemy for a user to be assigned to it via SSO only, and the group attribute must be sent as a claim in the SAML assertion.  If you wish to create, remove, and edit group membership that can be done via SSO + SCIM.  

Please note: 

• SSO integration is only available for Enterprise Plan users. 
• The SSO integration can only be configured by a licensed admin in your organization’s Udemy Business account.

Where to configure SSO

To set up and manage your organization’s SSO integration in your Udemy Business account, please do the following:

1. Log into your account and click Manage in the top right menu.
2. Select Settings.
3. Next, click Single sign-on (SSO) from the menu on the left.
4. If you don’t have an active integration, click the Start setup button and select which identity provider you want to integrate with.

Please review the applicable article below to guide you through setting up your SSO integration. Note: for assistance in setting up SSO with other/custom identity providers, please contact our support team.

• How to Configure SSO with Azure AD
• How to Configure SSO with ADFS
• How to Configure SSO with Okta
• How to Configure SSO with OneLogin
• How to Configure SSO with Google Workspace
• How to Configure a Custom SSO Connection
• Cohort learning: Review how to configure SSO for our cohort learning platform, Corp U.

Optional SSO settings

Once you’ve configured your SSO integration, you can access these options by clicking the Optional settings dropdown menu at the bottom of the page. 

• Please note: if you encounter a notification stating your account is not compatible with our self-serve SSO feature, and wish to modify any of the optional settings, please contact Udemy Support.

Optional SSO settings include:

• Log in via SSO Provider only:
  All users will be forced to log in via SSO. If this option is not selected, users will be able to log in via SSO or their username and password.
• Please note: It is advised that all new configurations start with optional SSO to ensure any errors in the configuration do not impact the current user accessibility.
• Custom redirect URL:
  Insert the URL of the page you wish your users to land on if an error occurs with your SSO connection.
• Session timeout:
  Set a time, after which, inactive users will be automatically logged out of Udemy Business.
• Single logout:
  When a user logs out of Udemy Business, they will be logged out of all SSO applications.
• Allow SSO auto-provisioning:
  New users logging in through SSO will be automatically provisioned with a license. Otherwise, only existing users and users that have been invited to the account will be allowed to log in and consume a license.
• Use Case: This can be disabled when an admin wishes to manage user access directly.
• Allow deactivated users to be reactivated via SSO:
  Users that have been deactivated will be automatically reactivated when they log in again through SSO (if these users are also still provisioned with access via SSO).

How to pause or delete your  SSO connection

Access: Manage > Settings > Single sign-on (SSO).
*NOTE: Deleting a connection will remove all connection information, and cannot be recovered.

• Learn how to update your SAML Signing certificate.

Udemy Business supports the following SAML attributes

Please note: all attributes are space and case-sensitive and do not include the colon.  Please copy paste directly from the list below to ensure proper formatting:

Required attributes

• email : the unique email of the user 

Optional attributes

• firstName : the first name of the user

• middleName : the middle name (if any) of the user

• lastName : the last name of the user

• displayName : the fully formatted name of the user

• Name ID : an identifier that can be used in cases where a name is duplicated

• groups : the list of groups to which the user belongs

• externalID : a unique user ID specified by the customer

• lmsUserID : a unique user ID specified by the customer

This article outlines how to configure single sign-on (SSO) with Udemy Business for any identity provider that supports SAML2.0 SSO.

Additional resources:

• An overview of Udemy Business SSO & core features
• Implementation guides for pre-configured IdPs (Okta, Azure, AD FS, OneLogin, Google Workspace)

Please note: SSO integration is only available with the Enterprise Plan.

How to configure SSO

Pre-requisites

1. Download the Udemy Business SSO Metadata file.

2. You are an Admin within your Udemy environment.

Part 1 - Setting up Udemy Business as a Service Provider

For specific instructions in establishing a SSO connection in your system we recommend consulting your documentation

3. Use the provided UB metadata file to configure SSO within your Identity provider by saving the file or copying the URL. This process differs per identity provider so please refer to the particular Identity provider article for details.

4. Confirm SAML configuration values:

• • Entity ID: PingConnect
  • ACS URL: https://sso.connect.pingidentity.com/sso/sp/ACS.saml2
  • Logon/Base URL: Your Udemy Environment URL.({company}.udemy.com)
  • Relay State (optional): https://pingone.com/1.0/d905a6ca-adf9-45e2-9b9d-0d6485f27206
  • X509 Certificate: Found in Udemy metadata file

Please note:  If you are already using PingConnect as an Entity ID for another existing SSO application, please contact Udemy to create a unique Entity ID and generate a custom metadata file.

5. Confirm SAML attributes. Identity providers often provide these by default but you may wish to edit these attributes.

Udemy Business supports the following SAML attributes

Please note: all attributes are space and case-sensitive and do not include the colon.  Please copy paste directly from the list below to ensure proper formatting:

Required attributes

• email : the unique email of the user 

Optional attributes

• firstName : the first name of the user
• middleName : the middle name (if any) of the user
• lastName : the last name of the user
• displayName : the fully formatted name of the user
• Name ID : an identifier that can be used in cases where a name is duplicated
• groups : the list of groups to which the user belongs
• externalID : a unique user ID specified by the customer
• lmsUserID : a unique user ID specified by the customer

6. Download the Metadata file from your system

Part 2 - Configuring Udemy

1. Login to Udemy Business

2. Manage > Settings > Single Sign-On (SSO) > Start setup, and select Custom.

3. Connection Name: This can be anything (e.g. CSOD SSO).

4. Import the Metadata via URL or from the file you previously downloaded from your system.

5. Confirm Configuration

• • Verify that all parameters are correct for your environment.

6. Save. A banner will display in the lower right if the settings are successfully applied.

Your SSO Configuration is complete!  You can now provision users for Udemy Business in your SSO tenant.  

If you wish to configure SCIM, please review Configure SCIM Provisioning With Udemy’s SCIM API.

This guide provides the steps required to configure Single Sign-On (SSO) using Security Assertion Markup Language (SAML 2.0) for Udemy Business.

• Access Udemy Business SAML Metadata for Azure AD.
• Cohort learning: Review how to configure SSO for our cohort learning platform, Corp U.

Please note: If you are using the Gallery app, please keep in mind that it is not SCIM compatible. If you are planning to use SCIM, please create a Non-gallery application.

Configure Single Sign-On (SSO) with Azure

Log in to your Azure portal and click Microsoft Entra ID.

Next, select Enterprise applications.

 Now click + New application in the top bar.

 Select Create your own application.

Enter a name for the new application and click Integrate any other application you don't find in the gallery (Non-gallery) at the end of the window.

Then select Set up single sign on. 

For Single Sign-on mode, select SAML based Sign-on.

Follow the 3 steps on the Set up Single Sign-On with SAML screen. Azure AD has also provided a detailed configuration guide at the top of the page for further guidance.

For Step 1, Basic SAML Configuration:

• In the Identifier (Entity ID) field, enter https://www.udemy.com/sso/saml.

Please note: If the Entity ID is being used by another SSO application, please contact Udemy Business to create a unique Entity ID and generate a custom metadata file.

• In Reply URL field, enter this value: https://sso.connect.pingidentity.com/sso/sp/ACS.saml2
• In Sign on URL field, enter your Udemy Business account URL: https://{yoursubdomain}.udemy.com
• Relay State (Optional): https://pingone.com/1.0/d905a6ca-adf9-45e2-9b9d-0d6485f27206
• Logout URL (Optional): If you decide to configure Single Logout, enter the following: https://sso.connect.pingidentity.com/sso/SLO.saml2

Once all these fields are added, click Save.

For Step 2, User Attributes and Claims:

Go back to the Single Sign-on tab in the sidebar and click “Edit” on the Attributes & Claims” section.

In the Additional Claims section, click on the user.mail value.

• Update emailaddress to “email” (make sure it is all lowercase)
• Delete the Namespace URI
• For source attribute, make sure to select the email value you want to transfer from Azure AD to Udemy. This will be the main identifier for the users account.

To add more optional attributes (Additional claims) to your SAML assertion, click Add new claim or edit an existing claim and repeat the process:

Once you’re done adding the attributes, click Save to complete the attribute configuration.

Udemy Business supports the following SAML attributes

Please note: all attributes are space and case-sensitive and do not include the colon.  Please copy paste directly from the list below to ensure proper formatting:

Required attributes

• email : the unique email of the user

Optional attributes 

• firstName : the first name of the user
• middleName : the middle name (if any) of the user
• lastName : the last name of the user
• displayName : the fully formatted name of the user
• Name ID : an identifier that can be used in cases where a name is duplicated
• groups : the list of groups to which the user belongs
• externalID : a unique user ID specified by the customer
• lmsUserID : a unique user ID specified by the customer

For Step 3, in the SAML Signing Certificate section, click Download next to Federation Metadata XML, which will export the Metadata file.

Once you have downloaded the Metadata file, go to the Udemy Business SSO setup in Manage > Settings > Single Sign-On (SSO). Click Start setup and choose your Identity Provider (Azure in this case).

On the Udemy Business account SSO configuration page, name your connection, upload the metadata XML file you downloaded from Azure, and configure any desired Optional SSO Settings.

For additional details on the optional SSO settings, you can review our article on Configuring SSO with your Identity provider page:

Please note:  Do not enable Login via SSO Provider Only until you’ve tested your connection successfully.  If SSO is not properly configured, all users will be locked out of Udemy Business.

Click Save.

Your SSO connection is now enabled.

• You can now configure your user and group management for Udemy Business directly within your Azure tenant.  For a high-level overview, please reference the steps below in Adding Users and Groups to Udemy Business in Azure.
• Learn how to configure SCIM Provisioning With Azure Active Directory (AD).

Adding Users and Groups to Udemy Business in Azure

Click on Azure Active Directory.

Select Enterprise applications.

Select your newly created application from the list.

Click Users and groups.

Click on Add User -> Users and Groups

Select all users you want to add to the application. Then, click Select.

You have now completed configuring SSO for Udemy Business with Azure AD.

Please note:

• Single sign-on and provisioning are available to Udemy Business Enterprise Plan customers.
• Users provisioned through Azure AD will not take up a license until they log into the Udemy Business application for the first time. 
• SCIM provisioning changes can only be synced from Azure AD to Udemy Business, not the other way round. 
• Users and Groups managed by SCIM in Azure AD cannot be changed within the Udemy Business app - SCIM is the single source of truth for user and group data.
• You can still create groups manually in Udemy Business if you have users that you don’t need or want to push from Azure AD, eg. contractors or temporary staff.

This guide provides the steps required to configure Single Sign-On using Security Assertion Markup Language (SAML 2.0) and Provisioning using System for Cross-domain Identity Management (SCIM 2.0) for Udemy Business.

• Existing Okta and Udemy Business customers who wish to enable SCIM Provisioning in Okta should use this configuration guide.
• Learn how to configure advanced SSO settings on an organizational level.
• Cohort learning: Review how to configure SSO for our cohort learning platform, Corp U.

Please note:

• Single sign-on and provisioning are available to Udemy Business Enterprise Plan customers.
• Users provisioned through Okta will not take up a license until they log into the Udemy Business application for the first time. 
• SCIM provisioning changes can only be synced from Okta to Udemy Business, not the other way round. 
• Users and Groups managed by SCIM in Okta cannot be changed within the Udemy Business app - SCIM is the single source of truth for user and group data.

Contents

• Supported SAML attributes
• Configuration Steps

Features

Learn more about the provisioning features that are supported through single sign-in (SSO) with Udemy Business. 

Udemy Business supports the following SAML attributes

Please note: all attributes are space and case-sensitive and do not include the colon.  Please copy paste directly from the list below to ensure proper formatting:

• email : the unique email of the user 

Optional attributes 

• firstName : the first name of the user

• middleName : the middle name (if any) of the user

• lastName : the last name of the user

• displayName : the fully formatted name of the user

• Name ID : an identifier that can be used in cases where a name is duplicated

• groups : the list of groups to which the user belongs

• externalID : Okta automatically populates the externalID attribute field with the Okta User ID. If you wish to persist your own unique user IDs then you can complete this on Okta by following this article, Setup SSO, and mapping your udemy external ID attribute.

• lmsUserID : a unique user ID specified by the customer

Configuration Steps

1. To get started, log into your Udemy Business account and go to the User Access page from Manage > Settings > Single Sign-On (SSO).

Click Start setup. Choose your Identity Provider and follow the instructions from there to enable SCIM, and generate your credentials for inputting into your Identity Provider, as part of the configuration process.

2. From your Okta,  access the Applications page from the sidebar.

3. Click on Browse App Catalog, search for Udemy Business and click Add.

4. Adding the Udemy Business app will redirect you to the Application General Settings - Required page as shown below.  Choose a name for your Application label and click Done.

5. Next, click the Sign On tab then Edit.

Scroll down to Default Relay State and add

https://pingone.com/1.0/d905a6ca-adf9-45e2-9b9d-0d6485f27206

Scroll down to Advanced Sign-on Settings and add the Audience URI (SP Entity ID) value below into the corresponding field and click Save. 

PingConnect

6. On the same page, scroll down to SAML Signing Certificates. Click on Actions then View IdP metadata.  Copy the metadata URL to your clipboard.  

(Alternatively, you can select Download certificate to download the metadata file to your computer).

7. Navigate back to your Udemy Business account and access the Single sign-on (SSO) settings. On the configuration page, choose the appropriate metadata configuration method, and follow the instructions to create the SSO connection with your Identity Provider and Udemy Business.

Please note: If you are looking to enable Login via SSO provider only within Optional settings, please ensure your SSO is properly working by logging out and logging back in via SSO, before enabling this feature. Otherwise, you may be locked out of your Udemy Business account.

8. Click Save. SSO setup is now complete!

If you wish to continue and set up SCIM Provisioning in Okta please use this configuration guide.

Udemy Business supports federated authentication via SAML 2.0-based Single Sign-On (SSO). When SSO is enabled, Enterprise Plan customers will be able to manage employee authorization and authentication to their Udemy Business learning site from their corporate identity system. 

This article will cover all the key steps to add and configure Udemy Business SSO for OneLogin. You may, however, also want to refer to this OneLogin article regarding configuring apps for additional details.

Learn how to configure advanced SSO settings on an organizational level.

Features

Learn more about the provisioning features that are supported through single sign-in (SSO) with Udemy Business.

Udemy Business supports the following SAML attributes

Please note: all attributes are space and case-sensitive and do not include the colon.  Please copy paste directly from the list below to ensure proper formatting:

Required attributes

• email : the unique email of the user 

Optional attributes 

• firstName : the first name of the user
• middleName : the middle name (if any) of the user
• lastName : the last name of the user
• displayName : the fully formatted name of the user
• Name ID : an identifier that can be used in cases where a name is duplicated
• groups : the list of groups to which the user belongs
• externalID : a unique user ID specified by the customer
• lmsUserID : a unique user ID specified by the customer

Steps to Configure Udemy Business and Onelogin:

1. Add Udemy Business app from the OneLogin app catalog
2. Download SAML metadata (to upload into your Udemy Business account)
3. Upload OneLogin SAML metadata to Udemy Business account
4. Assign users to the Udemy Business application in OneLogin

Step 1: Add Udemy Business app from the OneLogin app catalog

Start by navigating to Applications > Add App in the OneLogin administrator dashboard. Next, search for “Udemy Business” in the App Catalog.

Select Add App:

Search for and click Udemy Business:

Click on Save to add the application:

Navigate to the Configuration tab and enter in your Udemy Business subdomain and then save. For example, if your company name is Acme Co. and your Udemy Business domain is https://acmeco.udemy.com, you would enter acmeco into the text field:

Step 2: Download SAML metadata (to input into your Udemy Business account)

Still in the Udemy Business Application tab from the previous step, navigate to the More Actions button:

And click the SAML Metadata button to download the SAML Metadata file. Save the file for the next step:

Step 3: Upload OneLogin SAML metadata to Udemy Business account (Note: For this step you will need Udemy Business Admin access)

In your Udemy Business account, navigate to Manage > Settings > Single Sign-On (SSO):

Select the Single Sign-On tab from the left hand menu.

Click the Start setup drop down and select OneLogin:

Add a Connection Name, select the OneLogin Metadata file from the last step, and click Save:

Step 4: Assign users to the Udemy Business application in OneLogin

Back in your OneLogin account, in the Access tab and Users tab, configure the users’ access for the newly created app, either by adding Udemy Business app to a role (recommended), or adding the app to a specific user. Please see OneLogin's article regarding how to assign users to applications. 

You have now completed configuring SSO for Udemy Business with OneLogin.

Users or roles which have been added to the Udemy Business account should now successfully be able to login and authenticate via OneLogin SSO!

Additional information about OneLogin is available in the OneLogin Knowledge Base.

SSO is set up so you can also configure SCIM provisioning in OneLogin with Udemy Business. This will allow you to provision, deprovision, create groups, manage group membership and change user profile details like name and email address in OneLogin. Any changes made within OneLogin will automatically update Udemy Business and other applications you have set up via this mechanism so you can manage your users in one place.  

You do not need to update both OneLogin and Udemy Business separately with these actions as it will all be synced from OneLogin. Learn more about configuring SCIM provisioning with OneLogin.

In this tutorial, we will configure ADFS with Udemy Business using the metadata from ADFS.

• Access the Udemy Business SAML Metadata for ADFS.
• Learn how to configure advanced SSO settings on an organizational level.
• Cohort learning: Review how to configure SSO for our cohort learning platform, Corp U.
• Note: SSO integration is only available with the Enterprise Plan.

Features

Learn more about the provisioning features that are supported through single sign-in (SSO) with Udemy Business.

Configuring ADFS

1. Launch the ADFS 2.0 console. 

2. Under Trust Relationships > Relying Party Trusts, add a new Relying Party Trust. This will launch the wizard shown below.

3. Next, you will be prompted to import the Udemy Business Metadata file. Udemy Business SAML Metadata for ADFS is linked here.

4. Enter a name for the connection, for example Udemy Business. 

5. On the Choose Issuance Authorization Rules step, select Permit all users to access this relying party.

6. Click Next to view the summary and complete the wizard.

 7. Leave the “Open the Edit Claim Rules…” option checked and finish the wizard.

8. This will launch the Edit Claim Rules configuration utility.

9. This example will only gather claims from Active Directory to present to Udemy Business. 

10. Configure a basic claim set.

Udemy Business supports the following SAML attributes (all attributes are space and case sensitive).

Required attributes

• email
  the unique email of the user 

• Name ID
  an identifier that can be used in cases where a name is duplicated

Optional attributes 

• firstName
  the first name of the user
• middleName
  the middle name (if any) of the user
• lastName
  the last name of the user
• displayName
  the fully formatted name of the user
• groups
  the list of groups to which the user belongs
• externalID
  a unique user ID specified by the customer

11. Once you’ve configured the claims, back on the ADFS 2.0 Relying Party Trusts window, right-click the newly created connection and view the properties for the connection. Navigate to the Encryption tab and Remove the encryption certificate.

12. That will complete the ADFS configuration. Next, you should download the metadata and input it into your Udemy Business account to create the SSO connection.

You can find the Metadata file by inputting your server name and linking to the below:

https://<ADFS server name>/FederationMetadata/2007-06/FederationMetadata.xml

Access the Single Sign-On (SSO) tab of your Udemy Business account. Click Start setup and choose your Identity Provider. On the configuration page, choose the appropriate metadata configuration method and follow the instructions to create the SSO connection with your Identity Provider and Udemy Business.

In this tutorial, we will configure Google Workspace (formerly known as G Suite and Google Apps for Work). 

• Access Udemy Business SAML Metadata for Google Workspace.
• Learn how to configure advanced SSO settings on an organizational level.
• Cohort learning: Review how to configure SSO for our cohort learning platform, Corp U.
• Note: SSO integration is only available with the Enterprise Plan.

Features

Learn more about the provisioning features that are supported through single sign-in (SSO) with Udemy Business.

Locating Your SaasID

To configure Google Workspace you will need your SaasID. This value will be provided by Udemy Business and it is going to be the sub domain to access udemy, e.g. the yoursubdomain where the Udemy Business full address is yoursubdomain.udemy.com.

In addition to your SaasID, you will also need the following parameters to configure Google Workspace.

• ACS URL
  https://sso.connect.pingidentity.com/sso/sp/ACS.saml2?saasid=yoursubdomain
• EntityID
  PingConnect
• Start URL
  https://pingone.com/1.0/d905a6ca-adf9-45e2-9b9d-0d6485f27206

Please note:  If you are already using PingConnect as an Entity ID for another existing SSO application, please contact Udemy Business to create a unique Entity ID and generate a custom metadata file.

Creating a New SAML Application in Google Workspace

The steps below outline how to create a new SAML application in Google Workspace.

• Log into Google Workspace Admin Console.
• Navigate to Apps > Web and Mobile apps.

• Click Add app > Add custom SAML app.

• Enter the Application Name and Description, upload a logo if desired, and click Continue.
• Click on the Download Metadata under Option 1 and click Continue.
• Fill in the ACS URL, Entity ID, Start URL and Name ID with the property values below and click continue.
  • ACS URL
    https://sso.connect.pingidentity.com/sso/sp/ACS.saml2?saasid=yoursubdomain
    EntityID
    PingConnect
    Start URL
    https://pingone.com/1.0/d905a6ca-adf9-45e2-9b9d-0d6485f27206

• Leave Start URL blank if users will only be accessing Udemy Business directly from the account URL (i.e., yoursubdomain.udemy.com). If your users will be accessing Udemy Business from Google Workspace, then you will need to apply the following value for the Start URL: https://pingone.com/1.0/d905a6ca-adf9-45e2-9b9d-0d6485f27206
• Next, add the attributes exactly seen in the screenshot below.

• Click Finish to complete the wizard.
• By default, new applications are OFF for all users. To turn this on, go back to Apps > Web and mobile apps and click User Access.

•  In Service status, change the toggle to ON for everyone and click Save.

• Finally, you will grab the metadata file created in Step 5 and enter it into your Udemy Business account to create the SSO connection.
  In Udemy Business, access the Single Sign-On (SSO) tab. Click Start setup and choose Google Workspace.

• On the configuration page, select Metadata file and Select file. Then upload the file received from Step 5.

Please note: when adding a new SAML application in Google Workspace, it might take up to 24 hours for the process to be completed.

Once the SAML application is created, you will need to configure attributes that are going to be sent in the SAML assertion.

Udemy Business supports the following SAML attributes

Please note: all attributes are space and case-sensitive and do not include the colon.  Please copy paste directly from the list below to ensure proper formatting:

Required attributes

• email : the unique email of the user 

Optional attributes 

• firstName : the first name of the user
• middleName : the middle name (if any) of the user
• lastName : the last name of the user
• displayName : the fully formatted name of the user
• Name ID : an identifier that can be used in cases where a name is duplicated
• groups : the list of groups to which the user belongs
• externalID : a unique user ID specified by the customer
• lmsUserID : a unique user ID specified by the customer

This article explains how Admins can replace the Security Assertion Markup Language (SAML 2.0) Signing Certificate for Single Sign-on (SSO) configured, Udemy Business accounts. 

How to update an SSO certificate in Udemy Business

You can replace your SAML Signing Certificate in your Udemy Business account, by using our self-serve settings. 

1. Access Manage > Settings > Single Sign-On (SSO). 
2. Use the Replace Certificate link to upload a new SAML Signing Certificate, which is provided by your Identity Provider.
3. Replace the certificate in your Identity Provider once it’s been updated in Udemy Business. 

Note: please update your SAML Signing Certificate in Udemy Business first, before updating it in your Identity Provider. This will help ensure a certificate mismatch from occurring, which would prevent your team from being able to access your Udemy Business account.

This article outlines the provisioning features that are supported through single sign-on (SSO) with Udemy Business. 

• Note: SSO integration is only available with the Enterprise Plan.

The following provisioning features are supported through SSO:

Identity Provider (IdP) Initiated SSO

• Users will be able to initiate the login process from their OneLogin dashboard

Service Provider (SP) Initiated SSO

• Users will be able to access [your-subdomain.udemy.com] and initiate the login process on their Udemy Business login page.

Just in Time (JIT) Provisioning

• Users authenticated through SSO will be provisioned to Udemy Business on their first login.
• All user attributes which are configured to be sent will be updated whenever the user logs in.

Reactivate Users

• User accounts can be reactivated on Udemy Business.