In addition to SAML (Security Assertion Markup Language), LearnWorlds supports OpenID for implementing seamless SSO (Single Sign-on) experiences. By utilizing SSO, users can access multiple systems with a single set of login credentials, significantly enhancing security and user convenience.
In this article, we will dive into how to integrate Facebook with LearnWorlds using OpenID, simplifying your user access and streamlining your platform's security. Below you can find a step-by-step guide on how to set this up.
Note that in order to publish your app, it's essential to connect a verified business portfolio. While you can connect an unverified portfolio or choose to add one later, verification is required to access data fully. To set up Facebook login with Open ID, navigate to your Facebook Developer Dashboard under Apps by following this link. Click on All apps and:
1. Click on Create App.
2. Select Authenticate and request data from users with Facebook Login under Add use case and click on the next button.
3. Set the login type, choose No, I'm not building a game, and click the next button.
4. On the App details screen, fill in the app name and contact email, and click on the Create app button.
Your app has been successfully created, and you will see the corresponding message displayed on your screen.
5. On your Meta for Developers Dashboard, click on the Customize adding a Facebook Login button option.
6. On the Customize page, click the Go to settings button.
7. Navigate back to your LearnWorlds school under Website → Website Settings → Authentication → Open ID connect and create a new OpenID Connect. Locate the Redirect URL and copy it.
Navigate back to Facebook and paste the URL under Valid OAuth Redirect URLs. Click on Save.
8. You are now sent back to the customize page. Under Permissions, click on the add button next to the email option to fill in the details.
9. Navigate to App settings → Basic and copy the App ID and App secret.
Paste the App ID and App secret into your LearnWorlds school in the new Open ID connect you created under the Client ID and Client Secret options.
10. Paste the link that we are providing: https://www.facebook.com/.well-known/openid-configuration/ under the Discovery Document link field and click on the Fetch button. 
11. Fill in the token endpoint with https://graph.facebook.com/v11.0/oauth/access_token. In the Scopes field, paste opened email public_profile, ensuring each scope is separated by a space.
12. Once this is completed, click on the Create button, and the Open ID connection will be ready! 
If you're using OpenID as an authentication method, it's mandatory to change the Site Navigation settings in the Payment Flow section for Logged-out users, as they will need to sign up/log in before proceeding to the payment page.
Also, you need to ensure that in all Payment Sections of your school's pages, 1-click Sales funnels, or the Payment Page of your school, the Sign in/up form option is set to hide since the user will not be able to sign in/up via the Learnworlds system. 
- If you set up an SSO solution and disable the LearnWorlds login, all the users will be redirected to the SSO provider to authenticate, LearnWorlds passwords will no longer be valid. The users need to exist or sign up with the SSO authentication provider. The change of the authentication provider will only change the authentication mechanism, all the user data as well as their roles (admin, instructor, etc.) will be intact.
- The SSO mechanism uses the user’s email address to identify the user (unique key); therefore, to change the user's email address, you need to manually update the new email both in your school and on your IDP.
Furthermore, you may use the bulk import (and enroll) functionality in case you need to import users that already exist in your SSO provider.
- If you revert to LearnWorlds authentication, users created via the SSO authentication will need to create a new password. Passwords can be changed:
- By the user via the forgot password mechanism
- By the admin reset and/or update password mechanisms
- The LearnWorlds password update/reset functionality as well as sign-up are only available for the Default LearnWorlds Authentication mechanism. Any other SSO authentication mechanisms will need to handle these functionalities.
- In case you misconfigure the custom SSO setup and this is the only available authentication mechanism, then only the Learnworlds School Owner account will be able to sign in to your school via our Learnworlds account sign-in page (https://account.learnworlds.com/login)
- The built-in Affiliate Management program can not be used for users who use SSO providers to sign in
- If you want to use more than three custom SSO, SAML, or OpenID solutions in total, please contact us at support@learnworlds.com. In case you are on the Learning Center plan you can also add 3 more by purchasing our scale package.