This article explains how Single Sign-On (SSO) works with Big Think+, why your organization might use it, and what’s required to set it up.
SAML 2.0 SSO Integration Overview
Single Sign-On (SSO) via SAML 2.0 allows learners to seamlessly and securely access Big Think+ using their existing company credentials. While not a content integration in itself, SAML-based SSO is a foundational access method that enables and supports many other integrations, including many of our API integrations.
SSO enables users to log in to Big Think+ without creating or managing a separate password, improving user experience and reducing friction. It also ensures that only authorized employees can access your Big Think+ instance.
Supported Use Cases
This integration allows organizations to:
Provide frictionless, secure access to Big Think+ for learners.
Ensure that only authorized users within the company access the platform.
Support integrations that require authenticated user access.
Use existing identity providers like Okta, Microsoft Entra, PingIdentity, and others to manage access.
What’s Required
To complete the SSO setup, Big Think+ needs:
Your organization’s SAML 2.0 metadata (either URL or XML).
An IT administrator to test the login and confirm successful access.
Optional: A logo for your login tile (for platforms like Okta).
User Access & Management
SSO handles all user authentication. You do not need to manually create user accounts in Big Think+.
Instead:
A designated administrator at your organization logs in via SSO and is promoted to an admin role by our team.
This administrator can then manage organization settings and permissions.
Additional user data, such as email, can be passed through SAML, depending on your setup.
Integration Checklist
Big Think+ provides metadata to our partner organizations with a URL: http://plus.bigthink.com/o/<client-permalink>/auth/saml/metadata
We ask partner organizations to provide metadata back, either as a URL or an XML file.
Note: The IDP Metadata URL is preferred, since that allows us to stay in sync with any changes to their system and does not expire.The partner organization tests either by setting up a tile in SSO system or by clicking a testing link provided by Big Think+ (https://plus.bigthink.com/o/<client-permalink>)
In some systems, partners will need to go into their SSO admin portal and grant users specific permissions.