How to set up Azure OIDC Single Sign-On (SSO) for Kahoot!

Learn how to integrate Azure OpenID Connect (OIDC) Single Sign-On (SSO) with Kahoot! step-by-step guide for secure authentication setup using Azure AD to streamline user access and improve account management.

If your organization uses SAML instead of OIDC, see our related guide:
👉 How to set up Azure SAML Single Sign-On (SSO) for Kahoot!

1. Access SSO Management in Kahoot!

1. Navigate to the SSO & SCIM Management in Kahoot. Click "Start setup".
2. Select Azure & OIDC as your identity provider.
3. From here, you will need to provide your Client ID, Client Secret, and Discovery URL.

2. Create a new Enterprise application in Azure

Redirect URL will be provided at the end of the Kahoot! Admin SSO & SCIM setup. If required, leave a placeholder value.

3. Add Azure Credentials to Kahoot!

Add Client ID

1. In Azure, copy Application (client) ID from Overview.
2. Paste it into the Client ID field under SSO & SCIM Management.

Add Client Secret

1. In Azure, go to Certificates & Secrets → New Client secret.
2. Copy the Secret value and paste it into the Client Secret field in Kahoot!. 
   

Add Discovery URL

1. Go to Overview, click on Endpoints in Azure, and copy the OpenID Connect metadata document URL.
   
2. Paste it into the Discovery URL field in Kahoot!.

4. Add Redirect URL to Azure

1. After entering your credentials in Kahoot!, copy the Redirect URL that Kahoot! provides.
2. Go back to Azure → Authentication → Add a platform → Web.
3. Paste the Kahoot! Redirect URL and save your changes.

5. Claims

Please use the standard for OIDC. Customization might lead to a faulty integration setup.

6. Test application 

1. Remember to log out of your Kahoot! account. 
2. Copy and paste the invitation link from your SSO & SCIM setup into your browser.
3. You should now be redirected to log in using Azure SSO.

7. How to connect existing users to SSO

If your organization already has Kahoot! users before enabling SSO:

1. Send them the invitation link from your SSO & SCIM setup.
2. When they log in via this link for the first time, they'll be automatically connected to SSO.

8. Manage User Provisioning

By default, Kahoot! SSO allows all Azure users to self-provision via the SSO link. If you want to restrict access:

• Use Azure group or user access settings to limit who can sign in to the Kahoot! Enterprise Application.

💡 Found this helpful? Subscribe to our Youtube channel for more tips and Kahoot! tutorials!