Skip to main content

Connecting Myagi to Your Internal Training Platform with Single Sign-On (SSO)

Myagi Support avatar
Written by Myagi Support
Updated this week

If your organization uses an identity provider (IdP) like Okta, Azure AD, or any SAML 2.0-compliant system, you can enable Single Sign-On (SSO) for seamless access to Myagi. This integration is available free of charge.

What is SSO?

Single Sign-On (SSO) allows your users to access Myagi using their existing internal credentials - no need to create separate login details. With SSO, your staff can access supplier training on Myagi directly from internal platforms like:

  • Learning Management Systems (LMS)

  • Human Resource Information Systems (HRIS)

  • Custom intranet portals

Benefits of SSO

  • 1-click login from your internal systems to Myagi

  • Automated user management - new hires are granted access immediately

  • Instant deactivation - access is removed for terminated employees

  • Reporting - easily track engagement with supplier training

What You’ll Need to Get Started

To connect your identity provider (IdP) to Myagi, we’ll ask for a few key details from your IT team (SAML Metadata):

  1. Single sign on service URL - The single sign on endpoint of the IdP. This is where we will send the authentication request.

  1. Single logout service URL (optional) - This is where we will send the logout request if the IdP wants to implement single log out as well.

  2. IdP x509 certificate - The public x509 certificate of the IdP. We will use this to verify requests. Your certificate should be PEM encoded. Use this tool to verify that the certificate is properly encoded.

  3. Username field - The name of the field you will send us that will act as a unique user identifier. It could be, for example, a link to one of the Microsoft claims in case IdP is Active Directory:

    bashCopyEdithttp://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

  4. Email field - The name of the email field you will send us.

  5. First name field - The name of the first name field you will send us.

  6. Last name field - The name of the last name field you will send us.

  7. Team ID field (optional) - The name of the field you send to us which will map a user to a Myagi team.

  8. Group ID field (optional) - The name of the field you send to us which will map a user to a Myagi group. If you send multiple values with this field name, we will add the user to multiple groups.

  9. Permission Group field (optional) - The name of the field used to map users to either the Team Manager or Company Admin permission group.

    • Value of this field needs to be "team_managers", "company_admins" or empty.

We’ll provide configuration values specific to your account, including:

  • Audience

  • Recipient

  • ACS URL

  • Logout URL

These will be based on your Myagi company subdomain.

Provide a Test User

To complete the setup and run end-to-end tests, we’ll also ask you to provide a test user account (email and password) that we can use to validate the integration from your side. This ensures everything works correctly before enabling SSO

How to Get Started

If you’re ready to enable SSO or want to learn more, please reach out to us at myagisupport@rallyware.com. Our team will guide you through the setup process and help ensure a smooth integration.

Did this answer your question?