Enterprise Integration · SAML / OAuth / LDAP / LTI

SSO & API Integration for Open edX

Connect your Open edX platform with your enterprise identity provider, learning tools, and business systems. SAML 2.0, OAuth 2.0, LDAP, LTI, and custom API integrations — configured by an engineer who has done this for Fortune 500 companies.

Integration Capabilities

Connect Open edX with your existing enterprise infrastructure

SAML 2.0

Enterprise-grade single sign-on with SAML 2.0. Connect Open edX with your identity provider — Azure AD, ADFS, Okta, OneLogin, PingIdentity, or any SAML-compliant IdP.

Azure AD / Entra IDOktaADFSOneLoginPingIdentityShibboleth

OAuth 2.0 / OpenID Connect

Modern authentication with OAuth 2.0 and OIDC. Social logins (Google, Microsoft, GitHub) and custom OAuth providers. Token-based authentication for APIs and mobile apps.

Google WorkspaceMicrosoft 365GitHubCustom OAuth servers

LDAP / Active Directory

Direct LDAP integration for organizations using Active Directory. Automatic user provisioning, group sync, and attribute mapping from your directory service.

Microsoft Active DirectoryOpenLDAPFreeIPA389 Directory Server

LTI (Learning Tools Interoperability)

Connect external tools and content into your Open edX courses with LTI 1.1 and LTI 1.3. Grade passback, deep linking, and roster sync for seamless tool integration.

TurnitinKalturaH5PZoomCustom LTI tools

Custom API Integration

Connect Open edX with any system via REST APIs. CRM integration (Salesforce, HubSpot), HRIS sync (Workday, BambooHR), payment gateways, and analytics platforms.

SalesforceHubSpotWorkdayStripeCustom APIs

Multi-Factor Authentication

Add MFA to Open edX for compliance-sensitive environments. TOTP (Google Authenticator), SMS-based verification, and hardware key support (FIDO2/WebAuthn).

Google AuthenticatorDuo SecurityFIDO2/WebAuthnSMS OTP

How It Works

01

Audit & Plan

We review your identity provider, existing integrations, and security requirements. You get a detailed integration plan with architecture diagrams.

02

Configure & Test

We configure Open edX, set up IdP connections, map user attributes, and test end-to-end authentication flows in a staging environment.

03

Deploy & Verify

Production deployment with monitoring. We verify SSO flows, user provisioning, and fallback scenarios. Documentation and runbooks included.

What's Included

IdP configuration and metadata exchange
User attribute mapping (name, email, role, groups)
Automatic user provisioning (JIT provisioning)
Group-based enrollment automation
Custom login page with SSO buttons
Fallback authentication for admin accounts
End-to-end testing across browsers
Security review and penetration testing
Documentation and admin runbooks
30 days post-launch support

Frequently Asked Questions

Which identity providers do you support?
We support any SAML 2.0 or OAuth 2.0 compliant identity provider. The most common ones we integrate are Azure AD (Microsoft Entra ID), Okta, Google Workspace, ADFS, OneLogin, and Shibboleth. If your IdP supports standard protocols, we can integrate it.
How long does an SSO integration take?
A standard SAML or OAuth SSO integration takes 1-2 weeks including testing. This includes IdP configuration, attribute mapping, user provisioning rules, and end-to-end testing. Complex setups with multiple IdPs, custom user flows, or LDAP sync take 2-4 weeks.
Can users be auto-provisioned from our identity provider?
Yes. We configure automatic user provisioning (Just-In-Time provisioning) so users are created in Open edX on their first SSO login. User attributes (name, email, role, department) are mapped from your IdP, and group/course enrollments can be automated based on IdP groups.
Can we have both SSO and local login?
Yes. We can configure Open edX to support SSO as the primary authentication method while keeping local login as a fallback for admin users or external learners who aren't in your directory. We can also enforce SSO-only for specific user groups.
What about API-based integrations (not SSO)?
Open edX has comprehensive REST APIs for enrollment, grading, user management, and course content. We build custom integrations that sync data between Open edX and your existing systems — CRM, HRIS, analytics platforms, or custom applications.
Do you support LTI 1.3?
Yes. We support both LTI 1.1 (legacy) and LTI 1.3 (current standard) with full grade passback, deep linking (LTI 1.3 Deep Linking), and Names and Roles Provisioning Services (NRPS). We also help you build custom LTI tool providers if you need Open edX to share content with other platforms.

Need to Connect Your Systems?

Free consultation. We'll review your IdP setup and provide a clear integration plan.

Discuss Your Integration Needs