SSO features that fit your identity stack

WooNinja SSO supports the protocols and identity providers your organisation already uses, with the flexibility to match your attribute and lifecycle needs.

7+

verified identity providers

3

connection protocols

< 1

week typical setup time

0

code required to deploy

SAML 2.0 Service Provider

Works as a SAML SP with support for signed assertions, encrypted assertions, metadata endpoints, and both SP and IdP-initiated flows.

OpenID Connect / OAuth 2.0

Authenticate via OIDC with PKCE, refresh tokens, and standard claims mapping. Supports major cloud providers out of the box.

Multi-Tenancy

Run separate connection configurations for different Thinkific sites, business units, or customer environments from one install.

Attribute Mapping

Map LDAP, OID, MACE-Dir, and Microsoft Graph attributes to Thinkific user fields, custom fields, roles, and groups.

User Provisioning

Create accounts on first login, update profile data on every login, expire inactive users, and control seat limits.

Group / Course Mapping

Assign learners to bundles, collections, or groups based on IdP attributes or membership assertions.

Federation Support

Compatible with InCommon, eduGAIN, and institutional federation metadata for research and education networks.

NameID Formats

Supports persistent, transient, email, and unspecified NameID formats to match your IdP configuration.

SAML / OIDC Logs

Trace authentication flows, inspect assertions, and share debug details with your identity team without needing server access.

Thinkific JWT SSO

Custom JWT-based single sign-on directly into Thinkific. Generate signed JWT tokens that authenticate users seamlessly with Thinkific's built-in SSO endpoints.

Enrollment Management

Automated enrollment into Thinkific products, bundles, and courses via application assignment, shareable links, user accounts, and external role mapping. All processed asynchronously through queued jobs.

Seat Management

Define seat limits per application and choose what happens when seats are exceeded — block new enrolments, unenroll existing users, or delete learner accounts. Seat usage is tracked and reported.

Custom Profile Fields

Map SAML and OIDC attributes to Thinkific custom profile fields. Supports text, dropdown, date, and other custom field types. Attribute values are synchronised on every login.

Works with your identity provider

One integration, every major enterprise IdP.

Explore protocol-specific features

Need a protocol or IdP we haven't listed?

We regularly add integrations. Tell us what you're using and we'll confirm compatibility.

Talk to sales