MasterClass at Work
Learning solutions for employees from the world’s best
Provisioning & Advanced Single Sign-On (SSO) Features
Auto-Provisioning on Request
MasterClass at Work offers an auto-provisioning feature where users can be automatically created upon login if they meet predefined criteria.
- Enable Auto-Provisioning: Set up rules in the IdP to allow automatic creation. This is done by request.
- Monitor New Users: Ensure logs capture all auto-provisioned accounts.
JIT Provisioning
Just-in-Time (JIT) provisioning allows users to be created dynamically at login without pre-existing accounts in MasterClass.
- Enable JIT in IdP Settings: The IdP must pass required attributes during authentication.
- User Attribute Mapping: Ensure attributes like email, first name, and last name are included in the assertion.
- Validation & Testing: Perform multiple login attempts with different test users to validate the setup.
SSO via Employee ID Numbers
For organizations utilizing Employee ID numbers for authentication, MasterClass supports employee ID-based login flows.
- IdP Attribute Configuration: Ensure the Employee ID is sent as part of the SAML assertion or OIDC token.
- MasterClass Lookup: Configure the platform to map Employee ID numbers to existing user records.
- Fallback & Recovery: Set up alternative login methods in case of mismatches or missing Employee IDs.
- Logging & Troubleshooting: Enable logs to capture failed lookups and incorrect mappings.