How to Configure SAML Authentication for LearnWorlds

Item

Details

Pre-check

  • Pre-configuration is required in LearnWorlds.

  • You need to have already created an account in LearnWorlds using the same email address as TrustLogin.

  • For the latest configuration steps, please refer to the manual provided by LearnWorlds.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the Administrator

Request SP to configure

Provisioning

API-based Provisioning supported (Account management available in TrustLogin)

SAML JIT Provisioning supported (Account management available in TrustLogin; user deletion not available)

None (accounts created in each system)
Note: For how to configure provisioning, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other:
Enabled for all users (SAML authentication and password authentication can be used together)
Users (SAML authentication only), Administrators (both SAML authentication and password authentication available)

Notes

If there is an error in the SAML configuration and you are unable to log in, only the LearnWorlds school owner account can log in from the LearnWorlds account sign-in page (https://account.learnworlds.com/login).
For details, please see here.

Table of Contents:

TrustLogin Admin Page Settings

LearnWorlds Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

LearnWorlds Settings (Continued)

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button at the top right of the screen.
    01.png

  2. On the "Register Company App" screen, search and select "LearnWorlds (SAML)".
    LearnWorlds01.png

  3. Under "Identity Provider Information", note down the values of "Identity Provider URL" and "Issuer / Entity ID", and download the certificate using the "Get Certificate" button.03.png

Now, let's move on to the settings on the LearnWorlds side.
Do not click the "Save" button, and open LearnWorlds in a separate window.

LearnWorlds Settings

  1. Open "Website > Website Settings > Authentication > SAML" and click "by leveraging a SAML-based authentication flow."
    LearnWorlds02.png

  2. Configure the settings as follows.
    SAML Check the box
    Name Any name of your choosing
    IDP Identifier (Entity ID) The "Issuer / Entity ID" you copied from TrustLogin
    Sign-on URL The "Identity Provider URL" you copied from TrustLogin
    Single Logout URL https://portal.trustlogin.com/
    Identity Provider Certificate Paste the contents of the "Certificate" you copied from TrustLogin

    LearnWorlds03.png

  3. Using the copy button, note down the "Service Provider (SP) URL", "Assertion Consumer Service (ACS) URL", and "Single Logout URL", then click "Update".
    LearnWorlds04.png

Now, return to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "Service Provider (SP) URL" you copied from LearnWorlds
    ACS URL for the Service The "Assertion Consumer Service (ACS) URL" you copied from LearnWorlds
    Logout URL

    The "Single Logout URL" you copied from LearnWorlds

    Note: Single logout is planned as a future feature addition, but it is not yet implemented and does not currently function


    LearnWorlds06.png

  2. Click the "Save" button to save.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "LearnWorlds (SAML)" and click the "Next" button at the top right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

② When an Administrator Adds Members

  1. In the "Admin Page > App" menu, search for and click the "LearnWorlds (SAML)" app.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.

LearnWorlds Settings (Continued)

Open "Website > Website Settings > Authentication > LearnWorlds" and, under "Login process", select "Login is disabled. Only admins can login. Νο one can sign up." This will restrict users to logging in via SAML authentication only, and they will no longer be able to log in with a password. Configure this option as needed.
Note: Administrators can still log in with a password.
LearnWorlds07.png

How to Configure SAML Authentication for LearnWorlds

Item

Details

Pre-check

  • Pre-configuration is required in LearnWorlds.

  • You need to have already created an account in LearnWorlds using the same email address as TrustLogin.

  • For the latest configuration steps, please refer to the manual provided by LearnWorlds.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the Administrator

Request SP to configure

Provisioning

API-based Provisioning supported (Account management available in TrustLogin)

SAML JIT Provisioning supported (Account management available in TrustLogin; user deletion not available)

None (accounts created in each system)
Note: For how to configure provisioning, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other:
Enabled for all users (SAML authentication and password authentication can be used together)
Users (SAML authentication only), Administrators (both SAML authentication and password authentication available)

Notes

If there is an error in the SAML configuration and you are unable to log in, only the LearnWorlds school owner account can log in from the LearnWorlds account sign-in page (https://account.learnworlds.com/login).
For details, please see here.

Table of Contents:

TrustLogin Admin Page Settings

LearnWorlds Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

LearnWorlds Settings (Continued)

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button at the top right of the screen.
    01.png

  2. On the "Register Company App" screen, search and select "LearnWorlds (SAML)".
    LearnWorlds01.png

  3. Under "Identity Provider Information", note down the values of "Identity Provider URL" and "Issuer / Entity ID", and download the certificate using the "Get Certificate" button.03.png

Now, let's move on to the settings on the LearnWorlds side.
Do not click the "Save" button, and open LearnWorlds in a separate window.

LearnWorlds Settings

  1. Open "Website > Website Settings > Authentication > SAML" and click "by leveraging a SAML-based authentication flow."
    LearnWorlds02.png

  2. Configure the settings as follows.
    SAML Check the box
    Name Any name of your choosing
    IDP Identifier (Entity ID) The "Issuer / Entity ID" you copied from TrustLogin
    Sign-on URL The "Identity Provider URL" you copied from TrustLogin
    Single Logout URL https://portal.trustlogin.com/
    Identity Provider Certificate Paste the contents of the "Certificate" you copied from TrustLogin

    LearnWorlds03.png

  3. Using the copy button, note down the "Service Provider (SP) URL", "Assertion Consumer Service (ACS) URL", and "Single Logout URL", then click "Update".
    LearnWorlds04.png

Now, return to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "Service Provider (SP) URL" you copied from LearnWorlds
    ACS URL for the Service The "Assertion Consumer Service (ACS) URL" you copied from LearnWorlds
    Logout URL

    The "Single Logout URL" you copied from LearnWorlds

    Note: Single logout is planned as a future feature addition, but it is not yet implemented and does not currently function


    LearnWorlds06.png

  2. Click the "Save" button to save.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "LearnWorlds (SAML)" and click the "Next" button at the top right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

② When an Administrator Adds Members

  1. In the "Admin Page > App" menu, search for and click the "LearnWorlds (SAML)" app.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.

LearnWorlds Settings (Continued)

Open "Website > Website Settings > Authentication > LearnWorlds" and, under "Login process", select "Login is disabled. Only admins can login. Νο one can sign up." This will restrict users to logging in via SAML authentication only, and they will no longer be able to log in with a password. Configure this option as needed.
Note: Administrators can still log in with a password.
LearnWorlds07.png