Configuring SSO (SAML)

Single sign-on overview

Single sign-on lets your learners access Northwind Academy with your existing identity provider — no separate Academy password to manage. Northwind supports any SAML 2.0 IdP, including Okta, Microsoft Entra ID, Google Workspace, and OneLogin.

Before you begin

• Admin access to both Northwind Academy and your IdP
• Permission to register a new SAML application in your IdP

Configure the connection

Paste the ACS URL https://sso.northwind.example/saml/acs and your Entity ID into your IdP. In Northwind Academy, open Site administration → Authentication → SAML2 and upload your IdP metadata XML.

Map the email and displayName attributes so new users are provisioned with the right profile fields on first login.

Test the login

Use an incognito window to confirm the IdP-initiated and Academy-initiated flows both work before rolling SSO out to all learners.