Stop managing CBT Nuggets credentials manually.
Without SSO, every new hire needs a separate CBT Nuggets login. Every offboarding adds a manual revoke step. Compliance reviews flag the gap. SSO removes the entire credential surface from your IT team's plate. Your IdP becomes the single point of access control.
< 1 day
Typical SAML/OIDC setup time with your identity provider
What SSO unlocks for your IT team
One-Click Login
Engineers log in with their company credentials. No separate password, no extra account setup, no friction. Compatible with any SAML 2.0 or OIDC identity provider.
Automated Provisioning
When you add someone to your IdP group, they get CBT Nuggets access. Remove them, and access is revoked automatically. SCIM-based user lifecycle management.
Works with Your IdP
Compatible with Okta, Microsoft Entra ID (Azure AD), Google Workspace, OneLogin, PingOne, and any SAML 2.0 or OIDC identity provider.
Setup guides: OktaMicrosoft Entra IDGoogle Workspace
Centralized access control
Eliminate shared passwords and reduce IT support tickets. Access lifecycle is owned by your IdP, not by a roster you maintain on our side.
Frequently asked questions
Which identity providers do you support?
SAML 2.0 and OIDC are both supported. We have customers running on Okta, Microsoft Entra ID, Google Workspace, OneLogin, PingOne, JumpCloud, and Duo. If your IdP supports the standard, CBT Nuggets supports your IdP.
Is SSO included with CBT Nuggets Teams, or is it an add-on?
SSO is included with every CBT Nuggets Teams account and Enterprise contract at no additional cost, from the first seat. Individual subscriptions use email + password authentication.
Do you support SCIM provisioning, or only SSO?
Both. SAML/OIDC handles authentication; SCIM handles user lifecycle (creation, attribute updates, deactivation) so the directory you already maintain in your IdP stays the source of truth.
How long does setup typically take?
Most teams complete SAML or OIDC configuration in under a day. The CBT Nuggets team provides setup guides for the common IdPs and is available to help during a guided onboarding session for Team-tier and Enterprise customers.
Can we restrict access to specific groups in our IdP?
Yes. You can scope CBT Nuggets access to a specific IdP group (or multiple groups). Anyone added to the group gets access automatically; anyone removed loses it. No manual roster maintenance on the CBT Nuggets side.