Streamline Access to Learning Resources: Microsoft Entra Integration with Learning Pool LMS

In today’s digital learning environment, providing seamless and secure access to educational platforms is paramount. This tutorial guides you through integrating Learning Pool LMS, a leading learning management system, with Microsoft Entra ID, Microsoft’s cloud-based identity and access management service. By establishing this connection, you can centralize user access control and enhance the learning experience within your organization’s learning pool ecosystem.

Integrating Learning Pool LMS with Microsoft Entra ID offers several key advantages:

• Centralized Access Management: Control precisely who within your organization can access Learning Pool LMS directly from Microsoft Entra ID.
• Simplified Sign-On (SSO): Enable users to automatically and securely log in to Learning Pool LMS using their existing Microsoft Entra accounts, eliminating the need for separate credentials.
• Enhanced Security: Manage user accounts and access permissions from a single, secure platform, improving your overall security posture.

Prerequisites for Integration

Before you begin the integration process, ensure you have the following in place:

• Microsoft Entra Subscription: Access to a Microsoft Entra subscription. If you don’t have one, you can sign up for a free account.
• Learning Pool LMS Subscription with SSO Enabled: An active Learning Pool LMS subscription with the Single Sign-On feature enabled.

It’s important to note that Learning Pool LMS provides dedicated support for Single Sign-On implementations. When you initiate an SSO project, a member of the Learning Pool LMS Delivery team will be your primary point of contact, guiding you through each step. If you are unsure who your contact is, reach out to your Learning Pool LMS Account Manager for assistance.

Understanding the Integration Scenario

This tutorial focuses on configuring and testing Microsoft Entra Single Sign-On (SSO) within a test environment. Learning Pool LMS supports Service Provider (SP) initiated SSO, meaning the login process begins from the Learning Pool LMS platform.

Step-by-Step Guide: Adding Learning Pool LMS to Microsoft Entra ID

To initiate the integration, you need to add the Learning Pool LMS application from the Microsoft Entra gallery to your tenant’s application list. Follow these steps:

1. Access the Microsoft Entra Admin Center: Sign in to the Microsoft Entra admin center using an account with at least Cloud Application Administrator privileges.
2. Navigate to Enterprise Applications: Go to Identity > Applications > Enterprise applications > New application.
3. Search for Learning Pool LMS: In the Add from the gallery section, type Learning Pool LMS into the search bar.
4. Add the Application: Select Learning Pool LMS from the search results and click Add. Allow a few moments for the application to be added to your Microsoft Entra tenant.

Adding Learning Pool LMS application from the Azure AD gallery to initiate integration process.

Alternatively, Microsoft provides an Enterprise App Configuration Wizard to streamline this process. This wizard assists in adding applications, assigning users and groups, configuring roles, and guiding you through SSO setup. Learn more about Microsoft 365 wizards.

Configuring Microsoft Entra SSO for Learning Pool LMS

Now, let’s configure Microsoft Entra SSO to work with your Learning Pool LMS instance. This setup will involve configuring SAML-based single sign-on and establishing the necessary user attribute mappings.

1. Access SSO Configuration: Sign in to the Microsoft Entra admin center with Cloud Application Administrator credentials. Navigate to Identity > Applications > Enterprise applications > Learning Pool LMS > Single sign-on.
2. Select SAML SSO: On the Select a single sign-on method page, choose SAML.
3. Edit Basic SAML Configuration: In the Set up single sign-on with SAML page, locate the Basic SAML Configuration section and click the pencil icon to edit the settings.

Accessing Basic SAML Configuration to adjust settings for single sign-on.

4. Metadata File Upload (Recommended): If you have a Service Provider metadata file provided by Learning Pool LMS, follow these steps for easier configuration:
   a. Click Upload metadata file.

   Option to upload metadata file for simplified SAML configuration.

   b. Click the folder logo to browse and select the metadata file, then click Upload.

   File explorer interface to select and upload the metadata file.

   c. Upon successful upload, the Identifier field in the Basic SAML Configuration section will be automatically populated.

   d. In the Sign-on URL text box, enter the specific Sign-on URL for your Learning Pool LMS instance. A common example is: https://parliament.preview.Learningpool.com/auth/shibboleth/index.php. Ensure you replace this with the correct URL provided by Learning Pool LMS.

   Note: If the Identifier value is not automatically populated, you will need to manually enter the correct value as provided by Learning Pool LMS.

5. User Attributes and Claims Configuration: To ensure proper user authentication, you need to configure the attributes that Microsoft Entra ID will send to Learning Pool LMS in the SAML token. At least one attribute is required to match users in both systems.

   a. Locate the User Attributes & Claims section and click Edit.

   Accessing User Attributes & Claims to configure SAML token attributes.

   b. Review the default attributes. Typically, the default attributes are sufficient. However, if Learning Pool LMS requires specific custom attributes, you can add or modify claims.

   c. To add a new claim, click Add new claim. To edit an existing claim, click the Edit icon next to the claim.

   Option to add new claims for user attribute configuration.

   Dialog box for managing user claims and configuring attribute details.

   d. In the Manage user claims dialog, configure the claim:

   • Name: Enter the attribute name as required by Learning Pool LMS.
   • Namespace: Leave this field blank unless specifically instructed otherwise by Learning Pool LMS.
   • Source: Select Attribute.
   • Source attribute: Choose the corresponding Microsoft Entra attribute from the dropdown list.
   • Click Ok and then Save in the User Attributes & Claims section.

6. Obtain Federation Metadata URL: In the SAML Signing Certificate section of the Set up Single Sign-On with SAML page, find the App Federation Metadata Url. Click the Copy button to copy this URL.

   Copying the App Federation Metadata Url to provide to Learning Pool LMS.

   Crucially, you must provide this copied App Federation Metadata Url to the Learning Pool Delivery team. They will use this URL to configure Learning Pool LMS to trust and establish SAML2 connections with your Microsoft Entra ID.

Assigning Microsoft Entra Users to Learning Pool LMS

To enable specific users in your Microsoft Entra ID to access Learning Pool LMS via SSO, you need to assign them to the Learning Pool LMS application.

1. Navigate to User Assignments: Sign in to the Microsoft Entra admin center as a Cloud Application Administrator. Go to Identity > Applications > Enterprise applications > Learning Pool LMS.
2. Access Users and groups: In the application’s overview page, find the Manage section and select Users and groups.
3. Add User Assignment: Click Add user, then select Users and groups in the Add Assignment dialog.
4. Select Users: In the Users and groups dialog, choose the users you want to grant access to Learning Pool LMS from the list. Click the Select button at the bottom.
5. Assign Roles (Optional): If you have defined roles for the Learning Pool LMS application, you can select a role from the Select a role dropdown. If no roles are configured, “Default Access” role will be selected.
6. Complete Assignment: Click the Assign button in the Add Assignment dialog.

Configuring Learning Pool LMS for SSO

The Learning Pool Delivery team will utilize the App Federation Metadata Url you provided to configure Learning Pool LMS to accept SAML2 authentication requests from Microsoft Entra ID. After they complete the configuration, they will guide you through testing steps to ensure the connection is working correctly.

Testing Single Sign-On

The Learning Pool Delivery team will provide detailed instructions and guidance for testing the SSO integration. Follow their instructions carefully to verify that users can successfully log in to Learning Pool LMS using their Microsoft Entra credentials.

Next Steps for Enhanced Security

Once you have successfully configured Learning Pool LMS with Microsoft Entra SSO, consider leveraging session control features for enhanced security. Session control, a capability within Microsoft Defender for Cloud Apps, builds upon Conditional Access policies to provide real-time protection against data exfiltration and infiltration. Learn more about enforcing session control with Microsoft Defender for Cloud Apps. By implementing session control, you can further secure your organization’s learning pool environment and sensitive data.