How to Configure SAML 2.0 for Lynda.com

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/Lynda.com SAML integration currently supports the following features:

• IdP-initiated SSO
• SP-initiated SSO
• Just In Time (JIT) provisioning

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Send an email to Lynda.com and request that they enable SAML for your organization.

2. Copy the following IDP Metadata into a text file. Save it with the file name metadata.xml and attach it to the email.

   Sign into the Okta Admin dashboard to generate this value.

3. Lynda.com will contact you when SAML is enabled.

4. Done!

---

Notes

The following SAML attributes are supported.

Okta sends the following default attributes as part of the SAML assertion:

Name	Value
uid	user.userName
givenName	user.firstName
sn	user.lastName
mail	user.email

In addition to the default attributes, Okta supports the following four custom attributes:

Name	Value
manager	appuser.manager
department	appuser.department
emplolyeetype	appuser.employeeType
location	appuser.location

Here is an example describing how to add and use the additional department attribute.

1. In Okta, navigate to Directory > Profile Editor.

2. Search for the Lynda.com app, then click on Profile:

   

3. Click Add Attribute, then enter the following:

   • Display Name: Enter a preferred attribute name. In our example, we used Department.

   • Variable Name: department.

     Important: In our example we are adding the department attribute. You must use the following variables names for the custom attributes: manager, department, employeeType, location.

   • Click either Add Attribute if you are adding just one attribute, or Save and Add Another to add more.

   Note: Scope (optional): If you check User personal, it means that the current attribute will be available once you assign the user to the Lynda.com application and will not be available once you assign the group to the app.

   

4. Click Map Attributes:

   

5. Select the Okta to Lynda.com tab.

6. Start typing the required attribute from the Okta Base User profile (or use the drop down list) and select the attributes you want to map.

7. In our example, we have selected the Department attribute, then use the green arrows (Apply mapping on user create and update).

8. Click Save Mappings:

   

9. Click Apply updates now:

   

10. Okta will now pass the department attribute with the value of the Department field from the Okta Base User Profile.

SP-initiated SSO

If not provided, request the SP link for your organization. This link can be used to connect to Lynda.com using a SP-initiated SAML flow. The SP link should look like this URL:

https://shib.lynda.com/Shibboleth.sso/InCommon?providerId=[CLIENT ENTITY ID]&target=https://shib.lynda.com/InCommon