OpenID is a popular single sign-on technology that allows access to all company web-resources with the same credentials. In iSpring Learn, OpenID Connect protocol works with the Okta identity provider - an authorization server that authenticates users and transmits info about a successful authorization to LMS.
Authorization with OpenID and Okta works in the mobile application.
Add Return Url — the web-page address where a non-authenticated user will be redirected.
To make the authorization in the mobile application work, add a modified Return Url to the authorization server. Swap the https scheme with islearn: for example, change https://auth.dev.mycompany,com/sso/login/oidc to islearn//auth.dev.mycompany.com/sso/login/oidc
Configuring iSpring Learn
Sign in with your iSpring Learn account and put the following link into the browser: https://yourcompany.ispringlearn.ru/settings/sso/oidc
Fill out the fields of the form.
|Automatically add new users via OpenID||Check this option to enable non-registered users to get added to iSpring Learn when attempting to login.|
|Response Type||The response type which is issued by the authorization server.|
|Return Url||The web-address of the page where non-authenticated users are redirected to.|
|Issuer||The security token issuer. This value can be retrieved on the authorization server — it is the URL of your Okta account.|
|Client Id||The client identifier which can be copied on the authorization server.|
|Client Secret||This parameter is used to authenticate the application when it is asking to get access to a user’s account. It’s created on the authorization server.|
If needed, match fields in iSpring Learn and your SSO service.
FInally, click Enable.
Even if users are not present in the iSpring Learn database yet, they will be automatically added to the users list. The only thing that can prevent a new user from adding can be your subscription plan limitation.
To create users when signing in with OpenID, we use the following parameters received from the authorization server:
Profile Field in iSpring Learn
If you have enabled OpenID in your iSpring Learn account and for some reasons can't login using single sign-on, type the following web address: https://yourcompany.ispringlearn.com/login?no_sso.
Now you will sign in with the account as usual, using your login and password.