Single sign-on (SAML and OIDC) integration
Yes. Personal Academy offers single sign-on from the Basic plan, with no separate enterprise tier. OIDC is configured in the admin area per organisation: issuer, client ID, secret and claim names. SAML 2.0 runs through the authentication service, and its registration is best-effort. There is no SAML just-in-time role mapping and no OIDC group claims yet, and no identity provider has been tested end to end.
See pricing (from $1 per active user)
Included from the Basic plan, $1 per active user per month.
At a glance
Administrators set up sign-in on the SSO page. OIDC works with any provider that publishes a standard issuer. SAML registration is attempted through the authentication service and reports clearly when it cannot complete.
| Status | Built, not yet verified |
|---|---|
| Included from | Basic plan |
| Authentication | OIDC authorisation code flow; SAML 2.0 |
| Data that flows | In: identity and email claims at sign-in. Out: nothing |
| Not yet | SAML role mapping, OIDC group claims and logout, an end-to-end test with a named identity provider |
How to set it up
- Open SSO in the Personal Academy admin area.
- Create an application in your identity provider and copy its issuer, client ID and secret (OIDC) or metadata (SAML).
- Enter those values on the SSO page and save.
- Sign in with a test account before requiring single sign-on for everyone.
Highlights
- OIDC set up in-app per organisation
- SAML 2.0 through the authentication service
- Included from the lowest paid plan
- Verified email domains route people to their organisation's sign-in
Technical overview
Authentication:OIDC (in-app) / SAML 2.0 (authentication service)
Setup Time:~20 minutes
Prerequisites:
- •Administrator access to your identity provider.
- •The Basic plan or above.