--- title: Self-Service Single Sign-On (SSO) Configuration Guide description: SSO Self-Service Guide image: https://help.acorn.works/hubfs/acorn-meta-preview.png --- [Skip to content](https://help.acorn.works/help-centre/s#main-content) English - Australia Show submenu for translations [Contact Us](https://help.acorn.works/help-centre/kb-tickets/new?hsLang=en-au) [Customer Portal](https://support.acorn.works/tickets?hsLang=en-au) [![AcornLogo\_Horizontal\_FullColourWhite\_1000px](https://help.acorn.works/hs-fs/hubfs/AcornLogo_Horizontal_FullColourWhite_1000px.png?width=200&height=45&name=AcornLogo_Horizontal_FullColourWhite_1000px.png)](https://help.acorn.works/help-centre?hsLang=en-au) - [Help Articles](https://help.acorn.works/help-centre/help-articles) - [Patch Notes](https://help.acorn.works/help-centre/patch-notes) - [Status](https://status.acorn.works/) Open main navigation Close main navigation - [Help Articles](https://help.acorn.works/help-centre/help-articles) - [Patch Notes](https://help.acorn.works/help-centre/patch-notes) - [Status](https://status.acorn.works/) - English - Australia Show submenu for translations - [Contact Us](https://help.acorn.works/help-centre/kb-tickets/new) - [Customer Portal](https://support.acorn.works/tickets) Welcome to the Help Centre - There are no suggestions because the search field is empty. 1. [Acorn Help Centre](https://help.acorn.works/help-centre?hsLang=en-au) 2. [Help Articles](https://help.acorn.works/help-centre/help-articles?hsLang=en-au) 3. [Single Sign-On](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#single-sign-on) 6 October 2026 # Self-Service Single Sign-On (SSO) Configuration Guide ## This article will guide you on how to create your own SSO integration with Acorn. #### **What's changed** - You can now connect your own identity provider - Okta, Microsoft Entra, Google Workspace, or any SAML/OIDC provider - and set it up yourself, without waiting on Acorn. - Setup happens from your Integrations Hub: generate a one-time link, hand it to your IT team, and they complete a guided wizard. - One system now handles both SAML and OIDC providers. - Any SSO connection you already have keeps working exactly as it does today - this is additive, not a migration. #### **Why it matters** Your users can sign in to Acorn with the same work identity they already use everywhere else - no separate Acorn password to manage or reset. And you're no longer dependent on Acorn's team to stand up the connection: your IT contact drives the whole setup, start to finish, usually in one sitting. #### **Before you start** You'll need two people, and they can be the same person: - **An Acorn administrator** with access to your Integrations Hub - they kick off setup and generate the link. - **Someone with admin access to your identity provider** (your IT or IAM team) - they complete the technical setup using the link. Have your identity provider decided before you start. Supported providers: - Okta - Microsoft Entra ID - Google Workspace - Any other SAML 2.0 provider (Custom SAML) - Any other OIDC provider (Custom OIDC) You can set up **up to 3 connections per provider**. If you try to add a 4th, you'll see a message pointing you at your existing connections - reach out to your Customer Success manager if you need more. #### **How to set it up** ###### Step 1: Generate a setup link 1. In Acorn, go to **Admin → Integrations Hub**. 2. Find the tile for your identity provider (Okta, Microsoft Entra ID, Google Workspace, Custom SAML, or Custom OIDC) and open it. ![9be0dd6a-1100-446c-9262-ec45d15a53e1](https://help.acorn.works/hs-fs/hubfs/9be0dd6a-1100-446c-9262-ec45d15a53e1.png?width=670&height=276&name=9be0dd6a-1100-446c-9262-ec45d15a53e1.png) 3. Give the connection a name (e.g. "Head Office Okta") and click **Generate link**. 4. Copy the link from the banner at the top of the tile. ![Screenshot 2026-07-02 at 10.25.30 am-1](https://help.acorn.works/hs-fs/hubfs/Screenshot%202026-07-02%20at%2010.25.30%20am-1.png?width=670&height=390&name=Screenshot%202026-07-02%20at%2010.25.30%20am-1.png) **This link is valid for 48 hours and works once.** Send it to whoever's completing setup on your IT/identity side as soon as you generate it. ###### Step 2: Complete the setup wizard Your IT contact opens the link and works through five steps. They can re-test as many times as they like before going live, and nothing goes live until the last step. 1. **Get started** - confirms which connection they're setting up. ![Screenshot 2026-07-02 at 10.26.52 am](https://help.acorn.works/hs-fs/hubfs/Screenshot%202026-07-02%20at%2010.26.52%20am.png?width=670&height=355&name=Screenshot%202026-07-02%20at%2010.26.52%20am.png) 2. **Create the application** in your identity provider's admin console. The wizard provides a downloadable metadata file, plus the Single Sign-On URL and Audience URI to enter by hand if needed. For Okta, Microsoft Entra ID, or Google Workspace, the wizard shows step-by-step guidance for exactly where to click in that provider's console alongside this step. For a custom SAML or OIDC provider, your IT contact will use the provided URLs/metadata to configure their own console. ![Screenshot 2026-07-02 at 10.29.02 am](https://help.acorn.works/hs-fs/hubfs/Screenshot%202026-07-02%20at%2010.29.02%20am.png?width=670&height=691&name=Screenshot%202026-07-02%20at%2010.29.02%20am.png) 3. **Map attributes** - matches the fields your identity provider sends (name, email, etc.) to the fields on an Acorn user profile. The common fields are pre-filled with sensible defaults; anything else is optional. ![8ee34abd-2291-49b8-bd37-1a7ad932cda1](https://help.acorn.works/hs-fs/hubfs/8ee34abd-2291-49b8-bd37-1a7ad932cda1.png?width=670&height=745&name=8ee34abd-2291-49b8-bd37-1a7ad932cda1.png) 4. **Configure the connection** - paste in the metadata URL your provider gives you (or upload the metadata file). For OIDC providers, enter the issuer URL, client ID, and client secret instead. 5. **Test and enable** - run a real sign-in test against the identity provider. On success, the wizard shows exactly what information came through, so your IT contact can confirm it's correct before going live. ![image](https://help.acorn.works/hs-fs/hubfs/image.webp?width=670&height=593&name=image.webp)   Clicking **Enable Connection** makes it live - your people can sign in through it from that point on. ![11-setup-complete](https://help.acorn.works/hs-fs/hubfs/11-setup-complete.png?width=670&height=424&name=11-setup-complete.png)   #### What your users see once it's live The login page automatically shows a way to sign in with your provider: - **One connection** → a single "Sign in with..." button. - **More than one** → a picker to choose between them, with recognizable logos for Okta, Microsoft Entra, and Google. Users only ever see the connections that apply to them. ![Screenshot 2026-07-02 at 11.00.37 am](https://help.acorn.works/hs-fs/hubfs/Screenshot%202026-07-02%20at%2011.00.37%20am.png?width=381&height=483&name=Screenshot%202026-07-02%20at%2011.00.37%20am.png)   #### **Managing your connection** Once a connection is live, go back to the same tile in the Integrations Hub to maintain it - no need to involve Acorn. 1. Find the connection in the **Active connections** list and click **Manage**. 2. This generates a fresh link on the spot, good for **24 hours and one use**. If you don't finish in time, just click Manage again for a new one. 3. From there you (or your IT contact) can: 1. Update the metadata URL if it's moved on your provider's side 2. Refresh the signing certificate, with its expiry date shown so you can see how soon you'll need to 3. Update attribute mapping 4. Run another test sign-in before confirming the change Deleting a connection is available from the same Active connections list, with a confirmation prompt first. #### **FAQ** **Do I need to migrate my existing SSO connection to the new system?** No. If you already have SSO set up, it keeps working unchanged. The new self-serve flow is for setting up new connections - talk to your Customer Success manager if you're interested in moving an existing connection over. **What if my identity provider isn't Okta, Microsoft Entra, or Google?** Use the Custom SAML or Custom OIDC tile. You'll get the same metadata/URL fields to configure your connection, though the wizard won't show provider-specific "click here" guidance the way it does for Okta, Entra, and Google - your IT contact will work from the URLs and metadata provided. **What happens if the setup or manage link expires before we're done?** Just generate a new one from the Integrations Hub - there's no limit on how many times you can do this, and generating a new one doesn't affect anything you've already configured. **Can we have more than one connection to the same provider?** Yes, up to 3 per provider. This is useful if different parts of your organization use separate instances of the same identity provider. **What happens if someone's sign-in fails?** They're returned to the login page with a specific error message (for example, if their account isn't set up to sign in this way yet) rather than a generic failure, and the message clears automatically when the page refreshes. **Can one connection cover multiple parts of our organization?** It can, but that kind of connection is set up by Acorn rather than by you. Contact your Customer Success manager if this applies to you. #### **Known limitations** - Using one SSO connection across multiple tenancies requires setup by Acorn. Contact your Customer Success Manager to arrange it. - Up to 3 connections per provider. - Setup links last 48 hours and work once; manage links last 24 hours and work once. - Step-by-step "where to click in your provider" guidance is currently available for Okta, Microsoft Entra ID, and Google Workspace. Custom SAML/OIDC providers use the same setup fields but without the inline walkthrough. - You'll need your own identity provider already in place - Acorn doesn't provision Okta, Entra, or Google accounts for you. - [Help Articles](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#main-content) - [User Management](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#user-management) - [Course Management](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#course-management) - [Live Learning Management](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#live-learning-management) - [Email Management](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#email-management) - [Tenancy Management](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#tenancy-management) - [Reporting](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#reporting) - [Workflows](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#workflows) - [Capabilities](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#capabilities) - [Momentum](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#momentum) - [Resources, Videos, Programs and Pages](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#resources-videos-programs-and-pages) - [Payments](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#payments) - [Multi-Language](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#multi-language) - [Content Sharing](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#content-sharing) - [Widget Dashboards](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#widget-dashboards) - [Forms](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#forms) - [Activities](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#activities) - [Self Registration](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#self-registration) - [End User Guides](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#end-user-guides) - [Single Sign-On](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#single-sign-on) - [Development Plans](https://help.acorn.works/help-centre/help-articles?hsLang=en-au#development-plans) - [FAQ's](https://help.acorn.works/help-centre/faqs?hsLang=en-au#main-content) - [Gamification & Social Learning](https://help.acorn.works/help-centre/faqs?hsLang=en-au#gamification-social-learning) - [Implementation & Onboarding](https://help.acorn.works/help-centre/faqs?hsLang=en-au#implementation-onboarding) - [Roles, Permissions & Access Control](https://help.acorn.works/help-centre/faqs?hsLang=en-au#roles-permissions-access-control) - [Hosting, Infrastructure & Business Continuity](https://help.acorn.works/help-centre/faqs?hsLang=en-au#hosting-infrastructure-business-continuity) - [Learning Paths & Development Plans](https://help.acorn.works/help-centre/faqs?hsLang=en-au#learning-paths-development-plans) - [Competency & Skills Management](https://help.acorn.works/help-centre/faqs?hsLang=en-au#competency-skills-management) - [Support & Customer Success](https://help.acorn.works/help-centre/faqs?hsLang=en-au#support-customer-success) - [Incident Management & Security Operations](https://help.acorn.works/help-centre/faqs?hsLang=en-au#incident-management-security-operations) - [Notifications & Communications](https://help.acorn.works/help-centre/faqs?hsLang=en-au#notifications-communications) - [Network & Application Security](https://help.acorn.works/help-centre/faqs?hsLang=en-au#network-application-security) - [Certifications & Compliance Tracking](https://help.acorn.works/help-centre/faqs?hsLang=en-au#certifications-compliance-tracking) - [Authentication & Single Sign-On](https://help.acorn.works/help-centre/faqs?hsLang=en-au#authentication-single-sign-on) - [Multi-Tenancy & Organizational Structure](https://help.acorn.works/help-centre/faqs?hsLang=en-au#multi-tenancy-organizational-structure) - [eCommerce & Monetization](https://help.acorn.works/help-centre/faqs?hsLang=en-au#ecommerce-monetization) - [Compliance Certifications & Audits](https://help.acorn.works/help-centre/faqs?hsLang=en-au#compliance-certifications-audits) - [Data Security & Encryption](https://help.acorn.works/help-centre/faqs?hsLang=en-au#data-security-encryption) - [User Management & Accounts](https://help.acorn.works/help-centre/faqs?hsLang=en-au#user-management-accounts) - [Personnel & Physical Security](https://help.acorn.works/help-centre/faqs?hsLang=en-au#personnel-physical-security) - [Localization & Language Support](https://help.acorn.works/help-centre/faqs?hsLang=en-au#localization-language-support) - [Mobile Access & Offline Learning](https://help.acorn.works/help-centre/faqs?hsLang=en-au#mobile-access-offline-learning) - [Branding, UI & User Experience](https://help.acorn.works/help-centre/faqs?hsLang=en-au#branding-ui-user-experience) - [Assessments, Quizzes & Surveys](https://help.acorn.works/help-centre/faqs?hsLang=en-au#assessments-quizzes-surveys) - [Integrations & APIs](https://help.acorn.works/help-centre/faqs?hsLang=en-au#integrations-apis) - [Course & Content Management](https://help.acorn.works/help-centre/faqs?hsLang=en-au#course-content-management) - [Workflow Automation](https://help.acorn.works/help-centre/faqs?hsLang=en-au#workflow-automation) - [Instructor-Led & Virtual Training (ILT/VILT)](https://help.acorn.works/help-centre/faqs?hsLang=en-au#instructor-led-virtual-training-ilt-vilt) - [Enrollment & Registration](https://help.acorn.works/help-centre/faqs?hsLang=en-au#enrollment-registration) - [Secure Development & Change Management](https://help.acorn.works/help-centre/faqs?hsLang=en-au#secure-development-change-management) - [Reporting & Analytics](https://help.acorn.works/help-centre/faqs?hsLang=en-au#reporting-analytics) - [Performance Management](https://help.acorn.works/help-centre/faqs?hsLang=en-au#performance-management) - [Privacy & Data Protection](https://help.acorn.works/help-centre/faqs?hsLang=en-au#privacy-data-protection) - [User Management](https://help.acorn.works/help-centre/faqs?hsLang=en-au#user-management) - [Patch Notes](https://help.acorn.works/help-centre/patch-notes?hsLang=en-au#main-content) - [2026](https://help.acorn.works/help-centre/patch-notes?hsLang=en-au#2026) - [2025](https://help.acorn.works/help-centre/patch-notes?hsLang=en-au#2025) - [2024](https://help.acorn.works/help-centre/patch-notes?hsLang=en-au#2024) - [2023](https://help.acorn.works/help-centre/patch-notes?hsLang=en-au#2023) - [2022](https://help.acorn.works/help-centre/patch-notes?hsLang=en-au#2022) - [Developers](https://help.acorn.works/help-centre/developers?hsLang=en-au#main-content) - [API](https://help.acorn.works/help-centre/developers?hsLang=en-au#api) - [Announcements](https://help.acorn.works/help-centre/announcements?hsLang=en-au#main-content) - [New Features & Updates](https://help.acorn.works/help-centre/announcements?hsLang=en-au#new-features-updates) - [Course Management](https://help.acorn.works/help-centre/course-management?hsLang=en-au#main-content) - [Course Settings](https://help.acorn.works/help-centre/course-management?hsLang=en-au#course-settings) - [Enrolments](https://help.acorn.works/help-centre/course-management?hsLang=en-au#enrolments) - [Forms](https://help.acorn.works/help-centre/course-management?hsLang=en-au#forms) - [Course Types](https://help.acorn.works/help-centre/course-management?hsLang=en-au#course-types) - [Troubleshooting](https://help.acorn.works/help-centre/troubleshooting?hsLang=en-au#main-content) - [Workflows](https://help.acorn.works/help-centre/troubleshooting?hsLang=en-au#workflows) - [Course Management](https://help.acorn.works/help-centre/troubleshooting?hsLang=en-au#course-management) - [User Management](https://help.acorn.works/help-centre/troubleshooting?hsLang=en-au#user-management) - [Reporting](https://help.acorn.works/help-centre/troubleshooting?hsLang=en-au#reporting) - [End User Guides](https://help.acorn.works/help-centre/troubleshooting?hsLang=en-au#end-user-guides) - [Quizzes & Assessments](https://help.acorn.works/help-centre/troubleshooting?hsLang=en-au#quizzes-assessments) - [Email](https://help.acorn.works/help-centre/troubleshooting?hsLang=en-au#email) - [Access & Login](https://help.acorn.works/help-centre/troubleshooting?hsLang=en-au#access-login) - [Live Learning Management](https://help.acorn.works/help-centre/troubleshooting?hsLang=en-au#live-learning-management) - [Getting Started](https://help.acorn.works/help-centre/getting-started?hsLang=en-au#main-content) - [Technical Requirements](https://help.acorn.works/help-centre/getting-started?hsLang=en-au#technical-requirements) - [Reference](https://help.acorn.works/help-centre/getting-started?hsLang=en-au#reference) - [Capabilities](https://help.acorn.works/help-centre/capabilities?hsLang=en-au#main-content) - [Reporting](https://help.acorn.works/help-centre/capabilities?hsLang=en-au#reporting) - [Overview](https://help.acorn.works/help-centre/capabilities?hsLang=en-au#overview) - [Assessments](https://help.acorn.works/help-centre/capabilities?hsLang=en-au#assessments) - [Setup & Configuration](https://help.acorn.works/help-centre/capabilities?hsLang=en-au#setup-configuration) - [Administration](https://help.acorn.works/help-centre/capabilities?hsLang=en-au#administration) - [Momentum](https://help.acorn.works/help-centre/momentum?hsLang=en-au#main-content) - [Workflow Builder](https://help.acorn.works/help-centre/momentum?hsLang=en-au#workflow-builder) - [Administration](https://help.acorn.works/help-centre/administration?hsLang=en-au#main-content) - [Email](https://help.acorn.works/help-centre/administration?hsLang=en-au#email) - [Training Records](https://help.acorn.works/help-centre/administration?hsLang=en-au#training-records) - [Certificates](https://help.acorn.works/help-centre/administration?hsLang=en-au#certificates) - [Multi-Tenancy](https://help.acorn.works/help-centre/administration?hsLang=en-au#multi-tenancy) - [Security](https://help.acorn.works/help-centre/administration?hsLang=en-au#security) - [User Management](https://help.acorn.works/help-centre/administration?hsLang=en-au#user-management) - [Reporting](https://help.acorn.works/help-centre/reporting?hsLang=en-au#main-content) - [Reports](https://help.acorn.works/help-centre/reporting?hsLang=en-au#reports) - [User Management](https://help.acorn.works/help-centre/user-management?hsLang=en-au) [![AcornLogo\_Horizontal\_FullColourWhite\_1000px](https://help.acorn.works/hs-fs/hubfs/AcornLogo_Horizontal_FullColourWhite_1000px.png?width=200&height=45&name=AcornLogo_Horizontal_FullColourWhite_1000px.png "AcornLogo_Horizontal_FullColourWhite_1000px")](https://acorn.works/) ###### GET IN TOUCH [support@acorn.works](mailto:support@acorn.works) --- [Asia Pacific: +61 2 6269 3330](tel:+61262693330) 8:30am to 5:30pm AEST, Mon - Fri --- [North America: +1 (888) 419-2505](tel:+18884192505) 8:30am to 5:30pm PT, Mon - Fri [mailto:hello@acorn.works](mailto:hello@acorn.works) Copyright © 2025, Acorn PLMS