Kahoot!: How to set up and manage SSO

Updated

Setting up and managing SSO: your step-by-step guide to configuring Single Sign-On for Kahoot!. Streamline user access, boost security, and simplify login management for your organization. Learn more and get started today!

☝️ SSO is available on Kahoot! 360 Enterprise (Standard, Pro, and Premium) and Kahoot! EDU (Pro and Premium) plans.

Shortcuts:

How to set up SSO

Single Sign-On (SSO) enables your organization to streamline user authentication by centralizing access management. With SSO, employees can securely sign in to Kahoot! using their existing company credentials, reducing password fatigue and manual account handling. This approach simplifies user access, strengthens security, and gives administrators greater control over who can use Kahoot across your organization.

To set up SSO:

  1. Contact your Account Manager to enable API access and assign the necessary roles for your organization.
  2. Log in to your account as the Organization Owner and click on your profile icon in the top-right corner of the screen.
  3. Go to Configurations and open SSO and SCIM Management.
☝️ If you don’t see SSO and SCIM Management option, SSO may not be enabled for your plan.
  1. Click Start setup to begin the configuration.
  2. Under Identity Provider (IdP) Settings, select your vendor (e.g., Okta, Azure)
  3. Choose your SSO type and enter the required details.
    • For OIDC: Client ID, Client secret, Discovery URL
    • For SAML: Metadata URL (SAML entity)
  4. Copy the Redirect URI and paste it into your Identity Provider configuration.
  5. Use the invitation link to test the SSO login by signing in through your Identity Provider.
💡 The setup is correct if the test user can log in successfully.
  1. Share the invitation link with users to enable SSO access.
  2. Open the created connection to review details such as the Redirect URL, invitation link, and SSO type.
💡 You can also copy the metadata or credentials from this view if needed.

How to edit SSO

If your identity provider settings have changed, you can update them under SSO and SCIM Management. Any edits made to the existing connection will require reauthorization with the updated credentials.

Here’s how to do it:

  1. In Configurations, locate SSO and SCIM Management.
  2. Click the pencil icon next to the existing SSO connection to begin editing.
  3. After updating the necessary fields (e.g., Client ID, Client Secret, or Discovery URL), click Save to confirm your changes.
☝️ Once you edit the current connection, it will become invalid. You must share the updated credentials with your IT department to re-establish the SSO connection.

FAQ

1. Who can set up SSO in our organization? Only users with the Organization Owner role have the necessary permissions to access and configure SSO settings.

2. Is SSO configuration mandatory for secure login? No, SSO is not mandatory for everyone. If your organization prefers a standard login process, you can continue using email and password authentication. SSO is recommended for organizations seeking improved security and easier access management.

3. What do I need to start setting up SSO? To start the SSO setup, you will need:

  • Credentials from your Identity Provider (such as SAML Entity ID, metadata, or a discovery URL)
  • Access to your Kahoot! organization's account settings
  • IT administrator support, if required by your company’s security protocols

4. What should I do if I can’t proceed with the setup? If API access is not enabled, or you encounter an error, please contact your Account Manager for support.

5. What are the configuration requirements for OIDC, SAML, and SCIM?

  • OIDC → Allowed claims: email profile

  • SAML → Custom claims: firstName, lastName, email

  • SCIM → Custom claim: kahootRole (LIMITED, MEMBER, ADMIN) – this field is mandatory for all requests.

6. Can I edit SSO settings after the setup is complete? Yes, SSO settings can be edited any time. Access the SSO Management section in account settings, click the edit (pencil) icon, and make your changes. Note that updating credentials might require your IT team’s input and may temporarily disrupt access.

7. What happens if I enter incorrect SSO credentials during setup? The SSO connection will fail if credentials are incorrect. Double-check details like your Entity ID, certificates, and metadata. You can correct errors and save changes to retry the connection.

8. Can I disable or remove SSO integration if needed? Yes, you can remove the SSO integration at any time by accessing your SSO settings. We offer a safe, on-demand wipeout feature that allows you to completely reset and clear your SSO configuration. Confirming the deletion will immediately revert all users to the standard login process. This self-service reset ensures you can start fresh without needing to contact support.

💡 Found this helpful? Subscribe to our Youtube channel for more tips and Kahoot! tutorials!

0 comments

Please sign in to leave a comment.