How to set up OIDC SSO for Kahoot! with Okta

Updated

Learn how to configure OIDC (OpenID Connect) SSO for Kahoot! using clear, step-by-step instructions. This setup ensures secure and seamless login for your team.

Important: This guide explains the setup steps on your Okta side.
If you’ve already completed these steps, continue with How to set up SSO on your Kahoot! account.

Shortcuts:

How to configure OIDC SSO with Okta

  1. Log in to your Okta account as an Administrator.
  2. In the left navigation, click the Applications dropdown, then click on Applications.
  3. On the Applications page, click Create App Integration.
  4. For Sign in method, select OIDC, for Application type, select Web Application. Then, click Next.
  5. On the New Web App Integration screen:
    • Enter the App integration name (this will appear in your Okta applications list).
    • Scroll down and for Controlled access select Skip group assignments for now
        
    • Click Next when done.
  6. Copy Client secret and Discovery URL. You will need it when configuring SSO in your Kahoot! account. 

  7. To get the Discovery URL, use your Okta domain (the one in your browser address bar when logged in as an admin), for example:

    https://trialexample955-admin.okta.com

    Add the suffix /.well-known/openid-configuration to it:

    https://trialexample955-admin.okta.com/.well-known/openid-configuration

You can now set up SSO for your Kahoot! account using this guide. 

I have set up SSO on Kahoot! account. How do I finish the configuration in Okta?

Once you’ve set up SSO in Kahoot!, you will receive two items: Metadata link and Invitation link.

To finalize the configuration in Okta:

  1. Copy the metadata link provided by Kahoot!.

  2. In your OIDC configuration settings, go to General Setting and click Edit.

  3. Scroll below to Login settings, update Single sign on URIs with the copied link, then Save your changes to complete the configuration.

Next actions: Assign users and share invitation link

Important: Finalizing the SSO configuration in Okta does not automatically allow members to log in using the invitation link. You must first assign users in Okta.

To assign users:

  1. In your Okta configuration, go to the Assignments tab.

    • Click Assign → Assign to People.

  2. Select the users you want to assign, then click Save.


✅ Once users are assigned, you can share the invitation link with them. The invitation link can be found under SSO settings in your Kahoot! account.

End user instructions

Click on the Magic Link provided for your organization to access Kahoot!*. Enter your work email and password on the login screen.

*Only required for first login - going forward, you can sign in directly on the Kahoot! website and your account will automatically redirect to SSO from there.

FAQ

  1. How do users login to Kahoot! through SSO? 
    Each organisation will be provided with a custom URL (magic link) by Kahoot!. Users can then click that link to login using Enterprise SSO. When they click on the link, they will be asked to authenticate themselves using their existing company login credentials if they’re not logged in already.
     
  2. What do we need to do to set up the integration with our identity management platform with Kahoot!’s SSO?
    Please follow the instructions in the setup guide for your respective identity provider. You will need admin access to your identity provider to configure Kahoot! as an app.
     
  3. What personal information does Kahoot! Require our SSO provider about the user to create an account?
    In the first version we need at least a user's email address. Our systems are GDPR compliant to protect user’s privacy. Our systems are GDPR compliant to protect users’ privacy. For more information, please see our Terms & Conditions and Privacy Policy.

  4. What happens to the user’s existing account if they had already signed up to Kahoot!?
    If we see that the user already has a Kahoot! Account associated with their work email, we will merge their existing account to join the new organisation. From that point on, they will use the Enterprise SSO magic link to sign in to their Kahoot! account.

    For Engage: If there is an existing account, an invitation will be sent to join the organisation.

  5. What happens if a user already has an active subscription?
    You will want to ensure that all of your kahoots are saved in your personal folder on your account (some of the upgraded accounts also have a "team folder" where your kahoots may have been saved). If your current account is under another email, ex: a personal email, and you want that to become your SSO work account - you will first need to go to your profile settings and change your email address to your Org email, then you will be able to accept and migrate over.
     
  6. What happens when the users in the user group are higher than the number of licenses we have with Kahoot?
    We will block the users from joining the new org and sign up and ask them to contact their administrator to increase the license count.
     
  7. What happens to users if we want to reduce the number of licenses?
    Admin will have to remove those users from the Kahoot! user group in their admin portal before they can reduce the total number of licenses. See our billing and payment terms.
     
  8. How do we offboard users from Kahoot?
    Once you have removed the user’s access from your identity provider e.g. Okta, they will no longer be able to access Kahoot! anymore. However, to vacate their used license, you will need to login to Kahoot!’s user management page to remove the user from the interface to free up that license.

💡 Found this helpful? Subscribe to our Youtube channel for more tips and Kahoot! tutorials!

0 comments

Please sign in to leave a comment.