--- title: "Account: External Authorization (SSO)" slug: "account-external-authorization-sso" tags: ["account settings"] updated: 2026-09-17T22:18:04Z published: 2026-09-17T22:18:04Z canonical: "support.smarteru.com/account-external-authorization-sso" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.smarteru.com/llms.txt > Use this file to discover all available pages before exploring further. # Account: External Authorization (SSO) This feature is not included with all accounts. Please contact our [Success Desk](mailto:success@neovation.com) if you would like to add this feature to your account. External Authorization allows you to configure a Single Sign On (SSO) connection between a third-party system (e.g., [Google](/v1/docs/sso-google-openid), [Microsoft ADFS](/v1/docs/sso-active-directory-federation-services), [Okta](/v1/docs/sso-okta), or any SAML 2.0 compatible identity provider with IDP-initiated SSO) to SmarterU. By establishing SSO, your learners will not need to have separate login credentials for SmarterU. SSO only refers to authentication. There are also options to establish automatic [user provisioning/de-provisioning](/v1/docs/user-sync-integrations). When you [edit your account's settings](/v1/docs/editing-your-account-settings), the External Authorization accordion of the Account Profile workscreen includes the following settings. ![Graphical user interface, text, application Description automatically generated](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/account-external-authorization-sso-image-ccxdzo1c.png) ## Settings Be sure to click **Save** after changing these settings. ### Enable External Authorization Check to allow Single Sign-On from a third-party system to SmarterU. SmarterU currently supports Single Sign-On through a number of providers. Each provider must be enabled in your account separately. The currently supported Single Sign-On providers are: - [SAML 2.0](/v1/docs/sso-saml-20) - [OpenID for Google Applications](/v1/docs/sso-google-openid) - [Azure AD B2C OpenID](/v1/docs/sso-azure-active-directory-b2c) - [SmarterU API](/v1/docs/api) A separate section will appear for each Single Sign-On provider enabled for your account. ### Master Login Control Controls how users are allowed to log in to your SmarterU account . This setting is only applicable if the [Enable External Authorization setting](/v1/docs/account-external-authorization-sso#enable-external-authorization) is checked. Select one of the following options: - SmarterU - Users can only log in from your [portal login page](/v1/docs/account-portals) using their SmarterU credentials (email address or Employee ID and password). ![Login Master Login Control - SmarterU 20230711](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/Login%20Master%20Login%20Control%20-%20SmarterU%2020230711.png) - External Authorization - Users can only log in using your organization’s Single Sign-On (SSO) provider. When users visit your [portal login page](/v1/docs/account-portals), it displays your [custom login message](/v1/docs/account-external-authorization-sso#login-message) along with a button that redirects them to your external SSO login page (specified in the [Login URL field](/v1/docs/account-external-authorization-sso#login-url)). ![Login Master Login Control - External 20230717](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/Login%20Master%20Login%20Control%20-%20External%2020230717.png) When the External Authorization option is selected, the [password recovery link](/v1/docs/recovering-your-password) will not display on the login page. Users will need to contact an administrator to request a [password reset](/v1/docs/resetting-a-users-password).  - Both -  Users can log in through SmarterU using their standard SmarterU credentials, or through your Single-Sign On (SSO) provider. When users visit your [portal login page](/v1/docs/account-portals), it displays your [custom login message](/v1/docs/account-external-authorization-sso#login-message) and two buttons. The first button redirects users to your external SSO login page (specified in the [Login URL field](/v1/docs/account-external-authorization-sso#login-url)). The second button redirects users to the standard SmarterU portal login page where they can log in using their email address or Employee ID and password. ![Login Master Login Control - Both 20230717](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/Login%20Master%20Login%20Control%20-%20Both%2020230717.png) - User-Specified - Allows you to manage login options on an individual user basis using the [User Default Login setting](/v1/docs/user-login-information#user-default-login) on each user's profile. System-generated emails (such as invitations, course reminders, and password resets) automatically send users to the correct login page based on their profile setting. When User-Specified is selected, the [portal login page](/v1/docs/account-portals) defaults to having users log in with their SmarterU credentials (email address or Employee ID and password) unless they arrive from a system-generated link. Login links sent outside the system (e.g., manually shared through an Intranet or in email communications) need to point users to the specific address based on which login method they require: your [SmarterU portal login address](/v1/docs/account-portals) for direct login (where users enter their email address or Employee ID and password) or the [SSO Login URL](/v1/docs/account-external-authorization-sso#login-url) (your external SSO login page). ### User Default Login Specifies the default login method assigned to new users created in your account. This setting is only applicable if the [**Enable External Authorization** setting](/v1/docs/account-external-authorization-sso#enable-external-authorization) is checked and the [**Master Login Control** field](/v1/docs/account-external-authorization-sso#master-login-control) is set to *User-Specified*. When users arrive via system-generated emails, such as invitations, course reminders, and password resets, SmarterU checks the [login method assigned to their individual user profile](/v1/docs/user-login-information#user-default-login) to determine how they can log in. If the user does not have a specific method selected, SmarterU uses the account-level default selected here: - SmarterU - By default, new users can log in directly using their SmarterU credentials (email address or Employee ID and password). - External Authorization - By default, new users can log in through your Single Sign-On (SSO) provider. When the External Authorization option is selected, the [password recovery link](/v1/docs/recovering-your-password) will not display on the login page. Users will need to contact an administrator to request a [password reset](/v1/docs/resetting-a-users-password). - Both - By default, new users have access to both login options, allowing them to log in through SmarterU using their standard SmarterU credentials, or through your Single-Sign On (SSO) provider. ### Login URL This setting is only applicable if [**Master Login Control**](/v1/docs/account-external-authorization-sso#master-login-control) and [**User Default Login**](/v1/docs/account-external-authorization-sso#user-default-login) are set to a value other than *SmarterU*. This is the URL that users will be redirected to when they click the Login button on the portal page. ### Customize Login Button Text This setting is only applicable if [**Master Login Control**](/v1/docs/account-external-authorization-sso#master-login-control) is set to a value other than *SmarterU*. This is the label that displays on the login button. ### Customize Portal Login Button Text This setting is only applicable if [**Master Login Control**](/v1/docs/account-external-authorization-sso#master-login-control) is set to *Both* or *User-Specified*. This is the label that displays on the portal's login button. ### Login Message This setting is only applicable if the [**Master Login Control**](/v1/docs/account-external-authorization-sso#master-login-control) is set to *External* or *Both*, or if the [**User Default Login**](/v1/docs/account-external-authorization-sso#user-default-login) is set to *External*. Enter the login message that your account users will see. ## Related - [Adding a User Manually](/adding-a-user-manually.md) - [Editing Your Account Settings](/editing-your-account-settings.md) - [External Authorization (SSO)](/external-authorization-sso.md) - [Generating a Certificate Signing Request](/generating-a-certificate-signing-request.md) - [SSO: Active Directory Federation Services](/sso-active-directory-federation-services.md) - [SSO: Microsoft Entra ID](/sso-microsoft-entra-id.md) - [SSO: Azure Active Directory B2C](/sso-azure-active-directory-b2c.md) - [SSO: Google OpenID](/sso-google-openid.md) - [SSO: GSuite](/sso-gsuite.md) - [SSO: Okta](/sso-okta.md) - [SSO: SAASPASS](/sso-saaspass.md) - [SSO: Salesforce](/sso-salesforce.md) - [SSO: SAML 2.0](/sso-saml-20.md) - [SSO: SmarterU API](/sso-smarteru-api.md) - [User Sync Integrations](/user-sync-integrations.md) - [User: Login Information](/user-login-information.md)