How to set up SAML 2.0 SSO for Kahoot! with Okta

Configure SAML 2.0 Single Sign-On (SSO) with Okta to ensure secure and seamless access to Kahoot! for your entire team. This guide provides administrators with step-by-step instructions to create the integration, assign users, and finalize the setup.

Shortcuts:

• How do I configure SAML SSO with Okta
• I have set up SSO on Kahoot! account, how do I finish the configuration in Okta?
• How do I assign users and share the invitation link?
• How do end users log in via SSO for the first time?
• FAQ

How do I configure SAML SSO with Okta?

To begin the integration, you must create a new SAML 2.0 application within your Okta administrator portal.

1. Log in to your Okta account as an Administrator.
2. In the left navigation, click the Applications dropdown, then click on Applications.
3. On the Applications page, click Create App Integration.
   
4. For the Sign-in method, select SAML 2.0, then click Next.
   
5. On the Create SAML Integration screen, enter the App name (this will appear in your Okta applications list) and click Next.
   
6. In the fields for Single sign on URL and Audience URI (SP Entity ID), enter https://placeholder.com as a temporary placeholder. You’ll replace it later with the correct values from your Kahoot! account. Learn more: How to set up and manage SSO for Kahoot!
7. From the Name ID format dropdown, select EmailAddress or Persistent.
   
8. Under Attribute Statements, add the following three exact entries: firstName, lastName, and email.
   
9. Click Finish to create the SAML integration.
   
10. On the Sign On tab of this application, copy the Metadata URL. You will need this link for the next phase in Kahoot!.
    

How do I finish the configuration in Okta after setting up Kahoot!?

Once you configure your Kahoot! account using the Metadata URL, you will receive a new Metadata link and an Invitation link from Kahoot!. You must update your Okta placeholder values to finalize the connection.

1. Copy the metadata link provided by Kahoot!.
2. Paste the link into your browser’s address bar and press Enter to view the raw XML metadata.
3. In the XML code, locate the line starting with Location= and copy the full link next to it.
   
4. Return to your Okta SAML settings and update both the Single sign on URL and Audience URI (SP Entity ID) with this copied link.
   
5. Save your changes.

How do I assign users and share the invitation link?

Administrators must explicitly assign users or groups in Okta before those employees can access Kahoot! via SSO.

1. In your Okta configuration, navigate to the Assignments tab.
2. Click Assign and select Assign to People.
   
3. Select the required users, then click Save.
4. Share the Kahoot! invitation link (found in your Kahoot! SSO settings) with the assigned users.

How do end users log in via SSO for the first time?

End users must use the custom Magic Link provided to your organization for their initial login.

Users should click the Magic Link, which prompts them to authenticate using their existing company credentials. After this initial setup, users can sign in directly on the Kahoot! website, and the system will automatically redirect them to your Okta SSO interface.

FAQ

1. How do users login to Kahoot! through SSO? 
   Each organisation will be provided with a custom URL (magic link) by Kahoot!. Users can then click that link to login using Enterprise SSO. When they click on the link, they will be asked to authenticate themselves using their existing company login credentials if they’re not logged in already.
    
2. What do we need to do to set up the integration with our identity management platform with Kahoot!’s SSO?
   Please follow the instructions in the setup guide for your respective identity provider. You will need admin access to your identity provider to configure Kahoot! as an app.
    
3. What personal information does Kahoot! Require our SSO provider about the user to create an account?
   In the first version we need at least a user's email address. Our systems are GDPR compliant to protect user’s privacy. Our systems are GDPR compliant to protect users’ privacy. For more information, please see our Terms & Conditions and Privacy Policy.
    
4. What happens to the user’s existing account if they had already signed up to Kahoot!?
   If we detect that the user already has a Kahoot! account associated with their work email, their existing account will be merged to join the new organization.
   During the merging process, the user must first log in via SSO and then provide their old Kahoot! password to verify their account. At this step, a special verification screen will appear:
   
   Once the merge is complete, the user will use the Enterprise SSO magic link to sign in to their Kahoot! account going forward.
    
5. What happens if a user already has an active subscription?
   You will want to ensure that all of your kahoots are saved in your personal folder on your account (some of the upgraded accounts also have a "team folder" where your kahoots may have been saved). If your current account is under another email, ex: a personal email, and you want that to become your SSO work account - you will first need to go to your profile settings and change your email address to your Org email, then you will be able to accept and migrate over.
    
6. What happens when the users in the user group are higher than the number of licenses we have with Kahoot!?
   We will block the users from joining the new org and sign up and ask them to contact their administrator to increase the license count.
    
7. What happens to users if we want to reduce the number of licenses?
   Admin will have to remove those users from the Kahoot! user group in their admin portal before they can reduce the total number of licenses. See our billing and payment terms.
    
8. How do we offboard users from Kahoot?
   Once you have removed the user’s access from your identity provider e.g. Okta, they will no longer be able to access Kahoot! anymore. However, to vacate their used license, you will need to login to Kahoot!’s user management page to remove the user from the interface to free up that license.

💡 Found this helpful? Subscribe to our Youtube channel for more tips and Kahoot! tutorials!