How to set up Azure SAML Single Sign-On (SSO) for Kahoot!

Updated

Learn how to configure Azure SSO for Kahoot! using clear, step-by-step instructions. This setup ensures secure and seamless login for your team.

1. Add a new Enterprise Application in Azure

Open Azure → Create a new Enterprise Application → Go to Single Sign-On.

2. Adding identifiers in Azure

  1. Identifier (Entity ID)
    • Click Add Identifier
    • Enter: https://placeholder/
     
  2. Reply URL (Assertion Consumer Service URL)
    • Click Add Reply URL
    • Enter: https://placeholder

  3. Click Save (top right).

3. Update Claims

  1. Change the claim mappings:
    • your attribute for user email → email
    • givenname → firstName
    • surname → lastName
  2. Make sure “namespace” is empty. 
  3. Delete all other Additional Claims in Azure.

4. Copy Metadata URL from Azure

In SAML Certificates, copy the App Federation Metadata URL.

5. Add Metadata to Kahoot!

  1. In Kahoot, go to SSO & SCIM Management.

  2. Click Start setup.

  3. Under Step 2, choose Azure.

  4. Select SAML and indicate whether it is for School or Business.

  5. Paste the App Federation Metadata URL copied from Azure.

6. Add Kahoot Metadata to Azure

  1. Copy and save your Enterprise Single Sign-on link from Kahoot! (available after setup).

  2. Copy Kahoot metadata and open it in a browser tab.

From the Metadata:

  • Find the <EntityDescriptor> tag → copy the entityId value

    (e.g., https://access-2.kahoot.com/auth/realms/kahoot-enterprise)

  • Find the <AssertionConsumerService> tag → copy the Location value

    (pattern: https://access-2.kahoot.com/auth/realms/kahoot-enterprise/broker/{uniqueAlias}/endpoint)

  1. Add these values into Azure as:

    • Identifier (Entity ID)

    • Reply URL (Assertion Consumer Service URL)

Leave the following blank:

  • Sign-on URL (Optional)
  • Relay State (Optional)
  • Logout URL (Optional)

7. Test the Application

It may take a few minutes for changes to propagate in Kahoot!.

Test can be done via this link: https://enterprise.kahoot.com/{idpAlias}/login
 The link can also be taken directly from the UI, where it is labeled as Invitation link.

⚠️ Make sure you are logged out of your Kahoot account before testing.

Replace identity-provider-alias with the alias in your new Enterprise SSO URL.

✅ Your Azure SAML Single Sign-On should now be configured with Kahoot!.

💡 Found this helpful? Subscribe to our Youtube channel for more tips and Kahoot! tutorials!

0 comments

Please sign in to leave a comment.