Connecting via SAML to Thinkific

Using our SSO connector, you can connect a SAML Identity Provider (IDP) to Thinkific.

Important:

We highly recommend using OAuth or OIDC if available. We have found SAML to be more complex to set up, and the time to production can be considerably longer.
For support requests, you must include logs from the IDP side, without them we are unable to troubleshoot SAML connections.

To get started, log in and select SAML, then Add SAML Tenant

To demonstrate the settings, we will use https://mocksaml.com/ as a reference:

Entity ID: https://saml.example.com/entityid
Login URL: https://mocksaml.com/api/saml/sso
Logout URL: https://mocksaml.com/api/saml/sso (MockSAML does not provide log out, but this is a required field, hence we will use the same URL as the login for this example. Important: Log out from Thinkific is not supported, as Thinkific does not offer this functionality.
Relay State URL: This is optional.
x509 Certificate: Copy and pasted from the text box. This certificate can be in X.509 format or Base64 encoded.
Metadata: This is optional.

Click Create

The tenant will be created, and it will display three URLs:

To test using MockSAML, you can click Test IdP Login

And enter the corresponding URLs from our dashboard. The first URL is the ACS URL, the second is the metadata URL.

Click Sign In

In the opposite direction, if you click the Sign On URL in the dashboard, you should be directed to MockSAML and be able to log in from there.