What you can do
Log in with the organisation's Microsoft account
Participants log in with their trusted Microsoft work account. If someone tries to log in with an email address from the configured domain, LearningStone automatically redirects the user to the organisation to log in there. No new password required. Read more
Automatic account creation
If a participant logs in for the first time and no account exists yet, one is created automatically. The trainer does not need to do anything for this.
Secure access per groupspace
A groupspace can be further secured by adding the domain to the allowlist, so that participants without SSO cannot be added to the group. This keeps access fully under the control of the organisation.
Built on open source technology
The SSO integration is based on the OpenID Connect protocol - an open standard. The underlying Open-ID technology was developed open source for the City of Amsterdam by Driebit and made available via the Zotonic framework, which was subsequently integrated into the LearningStone platform. Reliable, transparent, and widely accepted.
Set up via Microsoft Entra (formerly Azure AD)
The configuration works via an App Registration in the Microsoft Entra admin center, where LearningStone is set up as an OpenID Connect provider. The organisation's IT department does this once in consultation with LearningStone, after which everything works automatically.