How to Manage your Sign in/up Settings

In order to set up and manage your Sign in/up settings you can navigate to Website Settings → Authentication and set up the:

• General Settings - overview of all the authentication methods that are currently active in your school, along with the settings regarding whether Email Verification should be enabled in your school, the Force logout option, and whether you want to prohibit multiple concurrent sessions from the same user.  
• Authentication mechanisms - an outline of all available user authentication methods that you can enable as gateways for your learners to sign in/up and gain access to your academy

You can enable:

• LearnWorlds - the built-in authentication mechanism, which allows the signup, sign-in, and password reset to be handled directly by your school and will be discussed in this article. 
• Social - the sign-in/up of your learners using their Social Media accounts; the option to white label the sign-in/up process via social is also available. You can read more about Social sign-in/up in the article about How to set up your Social Logins.
  
• Custom SSO - this option is for school owners who want to use the WordPress Learnworlds SSO plugin or implement a custom SSO solution according to the Learnworlds SSO Guide. This setup handles sign-up, sign-in, and password reset by your WordPress or the custom authentication implemented. Available for our Learning Center plans or higher.
• SAML - organizations that already have their own Identity Provider (IDP) may set up this option to connect their LearnWorlds school with their IDP. The IDP will handle all the user’s sign-up/creation, sign-in, and password reset (available in our Learning Center plans or higher). How to Set up SSO for your Users with almost any Identity Provider (using SAML)
• OpenID Connect - This is a widely used open standard for authentication that allows applications to confirm user identity and obtain basic user information. With OpenID Connect, users can enjoy a seamless sign-on experience across multiple applications.

The SSO mechanism utilizes the user’s email to identify the user; therefore, to change the user's email address, you will need to update the new email both in your school and on your external identity provider.

General Settings

By navigating to Website Settings → Authentication → General you can see an overview of all the authentication methods that are currently active in your school, set up the Email Verification and Force logout option, and prohibit multiple concurrent sessions from the same user.  

Email Verification

If Email Verification is enabled, when users sign up, for security reasons they will be asked to verify their email address by going into their email inbox. Navigation in the school will not be allowed until the email is verified.

Force Logout

You can enable the setting "Force Logout" to automatically log out users from your school if they remain idle for too long. This also applies to mobile app users if you have published an app in the stores.

• Idle Time - Decide how many minutes of inactivity the user will be considered idle.
• Pre-logout message duration - Set the duration you want the notification message to be displayed if users have met the idle time criteria. In mobile apps, this message will not be displayed. 

Do not Allow Multiple Sessions

You can prohibit multiple concurrent sessions from the same user, where only the last login session will remain active (previous sessions will be disconnected).

LearnWorlds

For the LearnWorlds authentication mechanism, click on Website settings → Authentication → LearnWorlds and activate this option. This is the default built-in authentication mechanism that enables sign-up, sign in, and password reset handling natively in your school.

Login process

You have two options regarding the login process:

• If you want anyone to be able to login into your school, you can choose "Login is enabled for everyone".
• If you want to disable the login setting, you can click on "Login is disabled. Only admins can log in. Νο one can sign up", and only users with admin accounts will be able to login into your school.

When a user other than the admin tries to log in, they will receive the Login has been disabled message.

Sign up process

You can specify whether the users will be able to sign up for your school according to your convenience. You have three choices:

• Allow anyone to sign up.
• Let the signing up open to anyone only by buying a product through a payment page.
• Disable the sign-up field and add your users manually.

Notes: 

• In case you have selected "Login is disabled. Only admins can log in. No one can sign up" in the Login Process; the choices "Anyone can sign up" and "Anyone can sign up, however, only by buying a product first through a payment page" will be disabled too. Since you have chosen to disable the login process to your school, no one will also be able to sign up, so "No one can sign up. I will add my users manually" will be enabled by default.

• The text for the login and sign-up form can be easily changed, if you wish, by navigating to your admin menu and clicking on Settings → Site Language. 
• If you enable the Sign-up process through a payment page, please note that even though the product payment may fail after your payment gateway processes the transaction (e.g., card declined or insufficient funds), the user will be created in your School, with no access to the Product.
• If you enable the Sign-up process through a payment page, the social sign-ups on the payment page and in your login form will not function (giving the message "Registration prohibited"). This happens because, for social sign-ups, the account needs to be created before the purchase, as the user can then cancel the purchase and it would override the setting.
  
  

Disable Sign in/up buttons

In case you decide to disable sign-in/up buttons, you can share the below strings at the end of your school's URL to trigger the sign-in or sign-up form manually:

•  /?msg=not-logged-in
• /?msg=signup

So e.g. you will need to type this link www.yourschool.com/?msg=not-logged-in in case you have a custom domain (replace "yourschool" with the name of your school), to log in to your school. Accordingly, you need to follow this link www.yourschool.com/?msg=signup to sign up.

Sign up fields - Custom Sign up fields

You can see the default Sign up fields (Name, e-mail, password) and create Custom sign-up fields, as shown in this article. 

Password Protection Settings

Password Options - You can choose whether users can unmask their password while typing it.  You can also enable the "confirm password" field for users to retype their password during signup/password reset".

Password Strength - You can choose whether the password will need to include at least one upper case, one lower case, one special character, and/or a number.

You can see below the users' view during the Sign-up process if you enable all the password settings:

Two-factor authentication (2FA)

2FA (Two-factor Authentication) is an electronic authentication method in which a user is granted access to a website or application only after successfully presenting two or more pieces of evidence to an authentication mechanism as an additional protective layer or security. 

You can find out more about the options we offer and how to set it up in this article. 

Social

In LearnWorlds, you can specify whether users can sign in/up to your school through their Social Media accounts. You can find out more about Social Logins and how you can white-label them, in this article.