Security

Sign in with your work account

SSO, users from your directory and quizzes embedded on your intranet.

Included in the Business licence.

What's included

What IT usually asks about. Sign-in, users, roles and where quizzes can be shown

SSOSAML, OIDC and Microsoft Entra, and the option to require everyone to sign in with their work account.
SCIMUsers and licences follow a group in Okta or Entra.
Verified domainsProve your domain with a TXT record, and colleagues land in your organisation.
RolesAdmins, members and people who only comment.
The organisation owns the contentWhen someone leaves, their quizzes stay with an admin.
EmbeddingOnly your verified domain can show the quiz in a frame, with no cookies.

How to get started

01Verify the domainAdd the TXT record, and oQuiz picks it up by itself.
02Connect sign-inSAML, OIDC or Entra, and require SSO when you're ready.
03Sync your usersSCIM adds and removes colleagues, and licences follow the group.

The details

Personal links are only stored as a hash
The work account's address is checked at sign-in and not stored
Training answers are kept for as long as the organisation exists. After two years without activity, a participant's name and email address are removed
Usage statistics are only collected with consent
Each account belongs to one organisation, and organisations are kept separate
The bot's token in Slack and Microsoft Teams is stored encrypted

Which identity providers are supported?

SAML and OIDC, such as Okta, and Microsoft Entra directly.

Can we require SSO?

Yes. Then everyone on your domain signs in with their work account.

What happens when someone leaves?

SCIM removes the account, and their quizzes stay with an admin.

Can quizzes be shown on our intranet?

Yes, from your verified domain, with no sign-in and no cookies in the frame.

Is it included in the licence?

Yes. SSO, SCIM and embedding are included in the Business licence.

We'll go through sign-in and your directory with your IT team.