Skip to content
English
  • There are no suggestions because the search field is empty.

Setting up Single Sign On (SSO) for your school

Configure SSO with Wellio using SAML2 on Google GSuite, Azure Active Directory, Microsoft AFDS, Clever, Okta and many more.

⚠️ Note: Setting up SSO doesn't eliminate the need to enrol teachers & classes. Even with SSO enabled, users must still be provisioned through the Enrolment Portal or Class Join Codes. This ensures that only licensed users can access Wellio.

Enabling Single Sign-on (SSO) on Wellio allows for secure login using your school's existing Identity Provider (IdP) for both students and staff. This eliminates the need for remembering Wellio passwords and makes it easier to control access to Wellio at your school!

To support SSO, Wellio employs the SAML 2.0 protocol, which is compatible with most modern directory services, including but not limited to Azure Active Directory, Google GSuite, Microsoft AFDS, Okta, KeyCloak, and more.

If you're unsure about compatibility, you can contact your Wellio account manager or our Support team for assistance.

What you'll need to get started

Although SSO configuration is relatively straightforward, it is advisable to have someone familiar with setting up your school's Identity Provider, such as an IT team member, to carry out the process. They will need Wellio admin permissions to access the SSO setup steps.

During your setup, we will need the following:

  • Your identity provider - Let us know whether you're using Microsoft, Google, or another SAML provider.
  • SAML metadata file - This is also referred to as Federation Metadata XML or IdP Metadata.
  • Test account credentials (2x) - One teacher test account and one student test account, including the email address and password. We store these securely and delete them after testing.

How do I set up SAML SSO for my school?

Please access the instructions for your chosen provider below.

What happens next?

Once we receive your files and test credentials, our team will receive your SSO Review Request and attempt a test login using your test accounts.

If everything works, we'll enable SSO for your school and notify you. If there are any issues, we'll reach out with details on what needs to be corrected.

SSO reviews typically take 1–2 business days. More complex configurations may take longer.

How does this impact activation invite emails?

If your school has SSO enabled, users won't be required to activate their Wellio accounts prior to logging in for the first time. Users can log in immediately via the Sign In page.

Is your school's IT managed by the Department or a third-party?

Log an IT ticket with them and send them the following details:

Subject: Request to Configure SAML SSO for Wellio

Hi there,

We’re in the process of setting up Single Sign-On (SSO) for Wellio at our school and require your assistance to configure this.

Please complete Steps 1–4 of the relevant Wellio setup guide:

Wellio SAML Details:

  • Entity ID: [Insert Entity ID from Wellio Settings->SSO->Connect section]

  • Reply URL: [Insert Reply URL from Wellio Settings->SSO->Connect section]

Once configured, could you please provide:

  1. The XML Metadata file

  2. Details for:

    • One test staff account (email and password)

    • One test student account (email and password)

You can share the test account credentials using: https://onetimesecret.com

Once received, we will upload the metadata into Wellio’s SSO settings and submit it for testing and review.

Please let me know if you need any additional information.

Kind regards,
[Your Name]
[School Name]