Single Sign On (SSO)
Genio supports different ways for users to create their account and sign-in:
- Using a unique Password created just for Genio (the default option)
- Using Google SSO
- Other SSO Providers (SAML 2.0)
See our SSO FAQ for more information.
Google SSO
You can enable Google SSO through your Genio Admin Portal. See here for more details: https://help.genio.co/article/53-enabling-google-single-sign-on
Other SSO Providers (SAML 2.0)
Other SSO providers need to be manually configured both on your side and ours. You'll likely need help from your IT team to get this configured.
The following article goes through the steps to get SSO set up on your account. The first step is to send us your Identity Provider information detailed in Section 1: https://help.genio.co/article/320-sso-setup-guide
You can send this information to your Customer Success Manager, or support@genio.co and we can start setting up SSO on your account.
Important - Users still have to be manually invited to create an account before they can use Genio (unless you have 'Just in Time' enabled - see below)
FAQ
What is Single Sign-On (SSO)?
SSO is an authentication method that enables users to securely authenticate with multiple applications and websites by using just one set of credentials. For Genio, this essentially means that users can log-in using their organisation credentials rather than relying on separate login details for Genio.
Do you support Just In Time provisioning (JIT)?
Yes, but this option is only availble to our Site Wide customers. Please speak with your Customer Success Manager, or our support team, if this is something that you would like to use.
What is Just in Time Provisioning (JIT)?
Just in Time provisioning allows you to give access to Genio to large groups of users, without the need to manaully invite them through the Admin Portal. You create groups of users within your own identity provider system, and these users will be able to create a Genio account without an invitation. This makes it really easy when you're deploying Genio accross your whole organisation. Please note that we don't currently support automatic de-provisioning.
Do you support automatic de-provisioning of users?
No, we don't currently support de-provisioning of users. To remove access to Genio you still need to use the Genio Admin Portal.
What providers do you support?
We should be able to support any SAML 2.0 identity provider.
We've previously setup Microsoft Azure (Entra ID), ADFS, Cirrus Identity, Duo, Google Workspace, Ping Federate, QuickLaunch and Shibboleth. But please get in touch even if your provider isn't listed here.
How does SSO benefit me and my students?
We all have too many usernames and passwords. Taking advantage of SSO means that your students will be able to sign up and sign in to Genio with their organisation-issued credentials. Hopefully, fewer passwords + easier access = better student adoption!
We don't use SSO here, is this a problem?
What if a student forgets their Genio password?