Single sign-on and SCIM provisioning for your workforce
Let people sign in with the work account they already use, through SAML 2.0 or OpenID Connect. Create accounts the first time someone signs in, and keep people in step with your directory through SCIM 2.0. Available on Scale and Enterprise.
One less password for everyone
Your identity provider stays in charge of who gets in. Nialtus follows it.
Sign in with the work account
A “Sign in with” button on your login page sends people to Microsoft Entra ID, Okta, Google Workspace, OneLogin or Oracle OCI IAM, or any SAML 2.0 or OpenID Connect provider, and back again.
Close the password door
Switch to single sign-on only and nobody can use a password, except a full administrator with two-factor turned on. That keeps a way in if your identity provider is ever down.
Joiners and leavers handled
With SCIM 2.0, your directory creates, updates and deactivates people in Nialtus. Groups map to your departments, so the org structure follows too.
Set up in one screen, with your provider in mind
Pick SAML or OpenID Connect, then choose your provider. Nialtus shows the values to copy into it, each with a Copy button, and step-by-step setup notes for Entra ID, Okta, Google Workspace, OneLogin and Oracle. For SAML, import your provider’s metadata from a URL or paste the XML, and Nialtus fills in the rest and shows when the certificate expires.
Accounts created the first time someone signs in
Turn on just-in-time accounts and a person who signs in through your provider gets a Nialtus account on the spot. You choose the role they start with, which is never admin, and a default department. Their name, employee number, department and job title can come across from your provider, and can stay in sync at each sign-in.
SCIM keeps the list right without anyone typing
Point your identity provider at the SCIM base URL with a token from Nialtus. People added in your directory appear here, changes flow through, and people you remove are deactivated rather than deleted, so their training records stay. Groups become departments. The token is shown once and can be renewed or revoked at any time.
What single sign-on includes
The pieces an identity team asks about, built in.
Nialtus is built and run by Learning Everest, a training company that has answered security questions for enterprise clients for years. Single sign-on is built to pass the review your IT team will run.
Questions we hear a lot
Straight answers about single sign-on and SCIM.
Book a demo and we will walk through the setup for your identity provider, step by step.
