Background

Single sign-on (SSO) is an authentication method that enables users to securely authenticate with multiple applications and websites by using just one set of credentials.

User Flow Diagram

Steps to configure SSO (G- Suite)

Step 1: Navigate to Users & Departments select “Department” in the drop-down below, then click "Create Department" or add “Single User” in top right corner and provide the department name, user’s name and email Id to add new user in TLMS. 

                                           Create Department or Add single user in TLMS  

                                                   Fill the details to Add new user

Step 2: To configure SSO for TLMS in google admin console, navigate to "Apps" in the side menu bar, select "Web and Mobile Apps" from the drop-down, then choose "Add App" then click “Add Custom SAML app” in the drop-down below, to add "Krademy LMS”.

                                                                     Add App (Add custom SAML App)      

                                                Add App details (App name - Krademy LMS)

                        *You can choose to name the APP as TLMS or whichever name suits you the best. *

Step 3: Thereafter, Copy the SSO URL and entity ID, then download the certificate.

                                                                       Download Certificate

Step 4: Include the service provider details, such as the ACS URL and Entity ID, in Google        Admin account to enable access for employees of an organization.

                                   Add Service Provider Details (ACS URL, Entity ID)                                                        

Step 5: Log into TLMS, go to settings in the upper right corner, scroll down to Single Sign-ON, and upload the certificate downloaded from Google Admin and update the changes and the fetch Entity ID and ACS (Consumer) URL of service provider.

                                       Upload the Certificate previously downloaded to TLMS and Update

Step 6: Add the Entity ID, ACS URL and Start URL obtained from TLMS as previously described.

                                                             Enter Entity ID, Start and ACS URL

Step 7: Allow all users access by enabling the service status for groups in Google Admin.

                                                                           Turn ON for Everyone

SSO Login - TLMS

1.Enter email Id and Log in with Single Sign -ON (SSO).

                                                                                Login with SSO

NOTE - The user must be added to TLMS by the admin to log into the system prior