Log in Book a demo
TestInvite Logo TestInvite Logo
Sign up Book a demo
Getting Started What is TestInvite? Build Your First Test Run Your First Assessment Taking the Assessment Viewing the Results
Question Bank Question Bank Overview Common Question Features Content Editor Layout Hint Answer Explanations Question Properties Reporting Name Scoring Rubric Scoring AI Evaluation Preview & Scoring Simulation Question Types Multiple Choice Short Answer Long Answer Numeric Code Audio Video File Upload Photo Tabular Match Creating Questions Organizing Questions Content Blocks Roles & Access Media Library Import & Export Question Submissions Question Bank Schema Browsing Questions Cloning Questions Bulk Updating Questions
Tests Tests Overview My Tests Creating a Test The Test Editor Test Settings Sections & Pages Adding Questions Page Builders Test Profile Reporting Report Templates Pass / Fail Performance Levels Interpretations Test Papers Analytics Publishing a Test Test Library Marketplace
Tasks Tasks Overview Creating a Task Task Dashboard Steps Step Profile Step Contents Pre-Start Availability Anti-Cheating Reporting Device Compatibility Scenarios Certification Automated Emails Task Settings Access & Entry Participant Profile Web Pages Communication Advanced Candidates Test Sessions Results Session Details Documents Session Actions Sent Mails Proctoring Live Monitoring Post Proctoring Analytics
Organization Organization Overview Identity Configuration Portal Users Content Snippets Consent Billing Credits Integration
Organization Users

Single Sign-On (SSO)

Published 2026/07/09

Single Sign-On (SSO) lets your organization authenticate users through your own identity provider (IdP) instead of requiring separate TestInvite passwords. TestInvite supports SSO via the SAML 2.0 protocol.

Unique email enforcement must be active before SSO can be enabled.

SAML Configuration

  • Domains — the email domains that trigger SSO authentication (e.g. acme.com).
  • Enforcement — Optional: users can choose SSO or password login. Required: SSO is the only allowed sign-in method for matching domains.
  • IdP Entity ID — the unique identifier for your identity provider.
  • IdP SSO URL — the URL TestInvite redirects users to for authentication.
  • IdP Certificate — the X.509 certificate used to verify SAML responses.

Just-In-Time (JIT) Provisioning

With JIT provisioning enabled, users who successfully authenticate via SSO are automatically created in the user repository if they don't already exist. You can configure the default user type (learner or teammate), role assignments, folder, and group for provisioned users.

Go back