Skip to content
CBT Nuggets
DemoBook a Demo

One login. Zero friction. Full control.

SAML-based SSO integration with your identity provider. Your team logs in with company credentials, and your admins manage access from one place.

CBT Nuggets SSO login flow showing identity provider redirect and authenticated landing

Stop managing CBT Nuggets credentials manually.

Without SSO, every new hire needs a separate CBT Nuggets login. Every offboarding adds a manual revoke step. Compliance reviews flag the gap. SSO removes the entire credential surface from your IT team's plate. Your IdP becomes the single point of access control.

< 1 day

Typical SAML 2.0 setup time with your identity provider

What SSO unlocks for your IT team

One-Click Login

Engineers log in with their company credentials. No separate password, no extra account setup, no friction. Compatible with any SAML 2.0 identity provider.

Access Owned by Your IdP

Assign the CBT Nuggets app to a group in your identity provider. Anyone in the group signs in with SSO; remove them from the group and they can no longer sign in. Group-scoped app assignment in your SAML 2.0 identity provider.

Works with Your IdP

Okta and Microsoft Entra ID (Azure AD) are our preferred providers, with automated setup. Any other SAML 2.0 identity provider connects through manual configuration. Google Workspace is coming soon as a preferred provider.

Setup guides: OktaMicrosoft Entra IDGoogle Workspace (coming soon)

Centralized access control

Eliminate shared passwords and reduce IT support tickets. Access lifecycle is owned by your IdP, not by a roster you maintain on our side.

Frequently asked questions

Which identity providers do you support?

Any SAML 2.0 identity provider. Okta and Microsoft Entra ID are our preferred providers: setup is automated from your provider's metadata. Other SAML 2.0 providers connect through manual configuration. Google Workspace is coming soon as a preferred provider; email our support team to request access.

Is SSO included with CBT Nuggets Teams, or is it an add-on?

SSO is included with every CBT Nuggets Teams account and Enterprise contract at no additional cost, from the first seat. Individual subscriptions use email + password authentication.

Do you support SCIM provisioning, or only SSO?

SAML 2.0 single sign-on. Your identity provider decides who can sign in: assign the CBT Nuggets app to a group, and membership in that group is the access list. Seats are assigned and reclaimed in the CBT Nuggets admin console.

How long does setup typically take?

Most teams complete SAML 2.0 configuration in under a day. The CBT Nuggets team provides setup guides for the common IdPs and is available to help during a guided onboarding session for Team-tier and Enterprise customers.

Can we restrict access to specific groups in our IdP?

Yes. Assign the CBT Nuggets app to a specific IdP group (or multiple groups). Anyone in the group can sign in with SSO; anyone removed from it cannot.

See SSO setup in action

Get a personalized walkthrough and see how CBT Nuggets integrates with your identity provider in under a day.