How to set up OIDC SSO for Kahoot! with Okta

Learn how to configure OIDC (OpenID Connect) Single Sign-On (SSO) for your Kahoot! workspace using Okta. This setup ensures a secure and seamless login experience for your team members.

Shortcuts:

• How do I configure OIDC SSO with Okta?
• I have set up SSO on Kahoot! account, how do I finish the configuration in Okta?
• How do I assign users and share the invitation link?
• How do end users log in via SSO for the first time?
• FAQs

How do I configure OIDC SSO with Okta?

1. Log in to your Okta account as an Administrator.
2. In the left navigation menu, click the Applications dropdown, then click on Applications.
3. Click Create App Integration.
   
4. For the Sign-in method, select OIDC, and for the Application type, select Web Application. Click Next.
   
5. On the New Web App Integration screen:
   • Enter your App integration name (this appears in your Okta applications list).
   • Scroll down to Controlled access and select Skip group assignments for now.
   • Click Next.
     

You will need to copy the Client secret and Discovery URL for the next steps.

You can now set up SSO for your Kahoot! account using this guide. 

I have set up SSO on Kahoot! account. How do I finish the configuration in Okta?

Once you configure SSO on the Kahoot! platform, you will receive a Metadata link and an Invitation link.

To finalize the integration in Okta:

1. Copy the metadata link provided by Kahoot!.
2. In your Okta OIDC configuration settings, go to General Settings and click Edit.
3. Scroll down to Login settings and update the Single sign on URIs with the copied link.
4. Save your changes to complete the configuration.

How do I assign users and share the invitation link?

Finalizing the SSO configuration in Okta does not automatically allow members to log in using the invitation link. You must first assign users in Okta.

To assign users to the Kahoot! app:

1. In your Okta configuration, go to the Assignments tab.
2. Click Assign → Assign to People.
   
3. Select the users you want to grant access to, then click Save.

How do end users log in via SSO for the first time?

End users must use the custom Magic Link provided to your organization for their initial login.

Users should click the Magic Link, which prompts them to authenticate using their existing company credentials. After this initial setup, users can sign in directly on the Kahoot! website, and the system will automatically redirect them to your Okta SSO interface.

FAQ

1. How do users log in to Kahoot! through SSO? 
   Each organisation will be provided with a custom URL (magic link) by Kahoot!. Users can then click that link to log in using Enterprise SSO. When they click on the link, they will be asked to authenticate themselves using their existing company login credentials if they’re not logged in already.
    
2. What do we need to do to set up the integration with our identity management platform with Kahoot!’s SSO?
   Please follow the instructions in the setup guide for your respective identity provider. You will need admin access to your identity provider to configure Kahoot! as an app.
    
3. What personal information does Kahoot! Require our SSO provider about the user to create an account?
   In the first version, we need at least a user's email address. Our systems are GDPR compliant to protect users’ privacy. Our systems are GDPR compliant to protect users’ privacy. For more information, please see our Terms & Conditions and Privacy Policy.
    
4. What happens to the user’s existing account if they had already signed up to Kahoot!?
   If we detect that the user already has a Kahoot! account associated with their work email, their existing account will be merged to join the new organization.
   During the merging process, the user must first log in via SSO and then provide their old Kahoot! password to verify their account. At this step, a special verification screen will appear:
   
   Once the merge is complete, the user will use the Enterprise SSO magic link to sign in to their Kahoot! account going forward.
    
5. What happens if a user already has an active subscription?
   You will want to ensure that all of your kahoots are saved in your personal folder on your account (some of the upgraded accounts also have a "team folder" where your kahoots may have been saved). If your current account is under another email, ex: a personal email, and you want that to become your SSO work account, you will first need to go to your profile settings and change your email address to your Org email, then you will be able to accept and migrate over.
    
6. What happens when the users in the user group are higher than the number of licenses we have with Kahoot!?
   We will block the users from joining the new org and sign up and ask them to contact their administrator to increase the license count.
    
7. What happens to users if we want to reduce the number of licenses?
   Admin will have to remove those users from the Kahoot! user group in their admin portal before they can reduce the total number of licenses. See our billing and payment terms.
    
8. How do we offboard users from Kahoot?
   Once you have removed the user’s access from your identity provider e.g. Okta, they will no longer be able to access Kahoot! anymore. However, to vacate their used license, you will need to login to Kahoot!’s user management page to remove the user from the interface to free up that license.

💡 Found this helpful? Subscribe to our Youtube channel for more tips and Kahoot! tutorials!