Skip to content
Contact us
  • There are no suggestions because the search field is empty.

🖱️ Single Sign-on (SSO)

This guide is divided into two parts: Part 1 walks you through SSO and setup, while Part 2 is here to help you if you run into any sign-in errors.

Contents


Part 1: Getting started

Read this part to understand SSO and get your school ready to use it. 

About SSO

Single sign-on (SSO) lets you sign in to Komodo with your school's Google, Microsoft or ClassLink account, instead of a separate Komodo password.

  • How it works: choose your provider on the Komodo sign-in page, and log in just like you normally would. From there, you are instantly sent back to Komodo, which securely matches you to your account using your school email address.
  • Why use it: one password to remember, and it is more secure because people are less likely to reuse passwords.
  • You need an account first: SSO signs you in to an existing Komodo account. It cannot create one. Your school's Komodo admin decides who has an account.
  • Supported types: Komodo supports OAuth sign-in. SAML, OIDC and LTI are not currently supported.

SSO Setup in Komodo

The Komodo team turns on SSO for your school. Once it's on, complete the following two steps bellow before staff and students start signing in, so there are no issues signing in on your first go.

1. Check everyone's email address (done by your school's Komodo admin)

To ensure a seamless login experience, SSO securely links your account using your email address. Simply make sure your all individuals’ Komodo email exactly matches your school Google, Microsoft, or ClassLink login.

  • Check user email addresses in Settings → People. Look for typos, old addresses or a different domain.
  • If your school syncs with Wonde, correct emails in your SIS instead. The sync overwrites changes made in Settings → People.
  • Anyone without a Komodo account can't use SSO, so add them first.
2. Approve Komodo with your provider (done by your school's IT team)

Approve Komodo for your whole school in advance, so people don't see an "approval required" screen when they first sign in.

  • Google Workspace:
    1. In the Google Admin console, open the settings for third-party app access (guide).
    2. Search for Komodo using Client ID 697087145121-4pbhg8opfck9irq72535sa0h33avve5t.apps.googleusercontent.com.
    3. Set its access to Trusted, Limited or Specific Google Data. For Specific, include at least the "Google Sign-in" scope.
    4. Apply this to the whole school, or to the staff and students who will use Komodo.
  • Microsoft Entra: use one of these options.
    1. Quickest: an IT admin signs in to Komodo with Log in with Microsoft. On the permissions screen, they tick Consent on behalf of your organisation, then click Accept.
    2. In the Entra admin centre: find the Komodo Wellbeing SSO app using Application ID 3c402b85-9169-4c20-b917-e964243b38b3 and grant admin consent for your organisation (guide).
    3. Let users approve it: if the whole school will use Microsoft SSO, change your user consent settings so people can approve Komodo themselves.
  • ClassLink:
    1. In the ClassLink Management Console, open Applications.
    2. Search the Global App Library for Komodo and click Add App.
    3. Assign Komodo to staff and students, using ClassLink groups or MIS/SIS groups via Roster Server.
    4. For more, see the ClassLink help centre.

Once both are done, tell staff and students to use the Log in with Google, Log in with Microsoft or Log in with ClassLink button on the Komodo sign-in page.


Part 2: Seeing an error?

Use this part if you see an error when signing in with SSO. First, check you used your school account and the right sign-in button, then try again. Still stuck? Find your error message in the table below.

Find your error

If your error mentions...

Full message you'll see

What to do

"couldn't find a Komodo account"

We couldn't find a Komodo account for the {provider} account you signed in with. Check you used your school {provider} account, or ask your school's Komodo admin to add you.

Or, if your email is shown: We couldn't find a Komodo account for {email}. Check you used your school {provider} account, or ask your school's Komodo admin to add you.

Check you signed in with your school account. If you did, ask your school's Komodo admin to add you or correct your email in Settings → People. If your school email itself is wrong, ask your school's IT team.

"isn't part of a school yet"

Your Komodo account isn't part of a school yet. Ask your school's Komodo admin to add you.

Your Komodo account exists but isn't linked to a school. Ask your school's Komodo admin to add you.

Approval required (a Google or Microsoft screen)

Shown by Google or Microsoft, not Komodo, so the wording varies.

Click the link to request access, then ask your school's IT team to approve Komodo. See SSO Setup in Komodo above.

"sign-in with ... didn't finish"

Your sign-in with {provider} didn't finish. Please try again.

The sign-in was cancelled or interrupted. Try again and complete every step on the Google, Microsoft or ClassLink screen. Still happening? Contact Komodo support.

"couldn't get your details"

We couldn't get your details from {provider}. Please try again, or ask your school's Komodo admin for help.

Usually a temporary issue. Try again later. Still happening? Ask your school's Komodo admin, or contact Komodo support.

"couldn't finish logging you in"

Sorry, we couldn't finish logging you in with {provider}. Please try again, or ask your school's Komodo admin for help.

This often means the sign-in link expired. Go back to the Komodo sign-in page and try again. Still happening? Contact Komodo support.

"didn't get an email address"

We didn't get an email address from {provider}. Check your {provider} account has an email address, or ask your school's Komodo admin for help.

Check your Google, Microsoft or ClassLink account has an email address. If you're not sure, ask your school's IT team. Still happening? Contact Komodo support.

"hasn't verified the email address"

{provider} hasn't verified the email address on your account. Verify it with {provider}, or ask your school's Komodo admin for help.

Verify your email address with Google, Microsoft or ClassLink, or ask your school's IT team to check your account.

"isn't turned on for your school"

Logging in with {provider} isn't turned on for your school. Log in another way, or ask your school's Komodo admin to turn it on.

Log in another way for now, and ask your school's Komodo admin to turn it on in Settings → Preferences.

"isn't the one linked to your Komodo account"

This {provider} account isn't the one linked to your Komodo account. Ask your school's Komodo admin to reset your {provider} sign-in.

Contact Komodo support and we'll reset your sign-in for that provider. This usually happens after a school changes its sign-in setup.

"we don't support logging in with"

Sorry, we don't support logging in with {provider}.

Use one of the sign-in buttons on the Komodo page. Still seeing it? Contact Komodo support.

"not allowed to log in using SSO"

Sorry, your account is not allowed to log in using SSO.

Contact Komodo support, and don't sign in another way until we've looked into it.

"something went wrong logging you in"

Sorry, something went wrong logging you in. Please try again, or ask your school's Komodo admin for help.

Try again from the Komodo sign-in page. Still happening? Contact Komodo support.

 

Return to Komodo