Enabling single sign-on (SSO) for your A Cloud Guru plan allows your learners to easily log in using SSO via your identity provider (IdP) application or the ACG login page (opens in new tab). It also allows your organization to manage learners’ access to ACG directly through your IdP.
Note: ACG and Skills require separate SSO connections. For details on setting up SSO for your Skills plan, see Single sign-on setup with Pluralsight (opens in new tab).
In this article
SSO features
ACG utilizes the SAML 2.0 version of SSO, as well as both IdP and SP-initiated login flows. SSO has several inherent features:
-
Just-in-Time provisioning (JIT): Easily manage user authorization and authentication by allocating licenses to learners as they log in for the first time.
Note: JIT is required and cannot be disabled for an ACG SSO connection.
- One-click login: Reduce time spent entering multiple login details by allowing learners to log in via your IdP.
-
No more password: Cut down the number of usernames and passwords a learner has to remember, and reduce password reset requests.
Note: Once SSO is enabled for your ACG plan, learners can only sign in via SSO. They can’t use a password to sign in.
Enabling SSO
To start the process of enabling SSO for your team, reach out to your Customer Success Manager or account representative. Then, an ACG Integrations Consultant will reach out to you to learn more about your IdP and provide you with credentials to help create the SSO connection.
Provide the ACG Integrations Consultant with the metadata needed to complete the connection. They will let you know when the connection is created and is ready for testing. Reach out to our Support team if you have any questions throughout this process.
Adding users to a plan roster via SSO
Enabling SSO eliminates the need to invite users to your team plan and replaces it with the SSO authentication. If the authentication grants a user permission to join your plan’s roster, they’ll be able to do so without an invitation.