Read this when: you're planning to switch your school to SSO and want to know if you're ready.
SSO links Edrolo accounts to your IdP using the email address. Every active user's Edrolo email must match your school's SSO domain exactly. If it doesn't, that user can't log in and no new account is auto-created.
Readiness checklist
| # | Check | Notes |
|---|---|---|
| 1 | Every active user's email ends in your SSO domain (e.g. @school.edu.au) | Admin Hub → User Management |
| 2 | No personal emails (Gmail, Hotmail, Yahoo) on active accounts | Filter by domain |
| 3 | Stakeholders informed | Go-live date + old passwords stop working |
| 4 | IT has IdP details ready (Entity ID, SSO URL, X.509 cert) | See IdP Configuration |
Fixing mismatched accounts
Path A — Bulk email update (small batches) Admin Hub → User Management → edit each email → save. Progress and enrolments stay with the account.
Path B — Timetable re-upload via Admin Hub. Accounts match on student/staff identifier, emails update.
What happens the moment SSO is on
- Edrolo redirects users to your IdP login
- Old Edrolo passwords stop working
- Inactive accounts reactivate on first successful SSO login
- The SSO email becomes their primary login identifier
Need to turn SSO off?
If something goes wrong widely:
- Admin Hub → Authentication
- Uncheck Enable SSO for all users → Save
Users immediately revert to standard Edrolo login, users who never set a password use Forgot password. Your SAML config is preserved.
Next step
When you are ready, configure your IdP ➡️ IdP Configuration: Setting up Single Sign-On (SSO)
Need help?
Contact your school’s Admin Hub administrator or reach out to our Edrolo Customer Care Team at help@edrolo.com.au