Stop managing CBT Nuggets credentials manually.
Without SSO, every new hire needs a separate CBT Nuggets login. Every offboarding adds a manual revoke step. Compliance reviews flag the gap. SSO removes the entire credential surface from your IT team's plate. Your IdP becomes the single point of access control.
< 1 day
Typical SAML 2.0 setup time with your identity provider
What SSO unlocks for your IT team
One-Click Login
Engineers log in with their company credentials. No separate password, no extra account setup, no friction. Compatible with any SAML 2.0 identity provider.
Access Owned by Your IdP
Assign the CBT Nuggets app to a group in your identity provider. Anyone in the group signs in with SSO; remove them from the group and they can no longer sign in. Group-scoped app assignment in your SAML 2.0 identity provider.
Works with Your IdP
SAML 2.0 SSO with any qualified providers, including Okta and Microsoft Entra ID. Your admin pastes your provider's SAML metadata, verifies your domain, and accounts are created the first time each person signs in.
Provider pages: OktaMicrosoft Entra IDGoogle Workspace (coming soon)
Centralized access control
Eliminate shared passwords and reduce IT support tickets. Access lifecycle is owned by your IdP, not by a roster you maintain on our side.
Frequently asked questions
Which identity providers do you support?
SAML 2.0 SSO with any qualified providers, including Okta and Microsoft Entra ID. Setup works the same way for every provider: your admin pastes the SAML metadata and verifies your domain. Google Workspace single sign-on is coming soon; email our support team to request access.
Is SSO included with CBT Nuggets Teams, or is it an add-on?
SSO is included with every CBT Nuggets Teams account and Enterprise contract at no additional cost, from the first seat. Individual subscriptions use email + password authentication.
Do you support SCIM provisioning, or only SSO?
SAML 2.0 single sign-on. Your identity provider decides who can sign in: assign the CBT Nuggets app to a group, and membership in that group is the access list. Seats are assigned and reclaimed in the CBT Nuggets admin console.
How long does setup typically take?
Most teams complete SAML 2.0 configuration in under a day. Your admin pastes your identity provider's SAML metadata and verifies your domain in the admin console; accounts are created the first time each person signs in.
Can we restrict access to specific groups in our IdP?
Yes. Assign the CBT Nuggets app to a specific IdP group (or multiple groups). Anyone in the group can sign in with SSO; anyone removed from it cannot.