New courseKey Changes to Waste Exemptions (Online Course – Tutored)
ISO 14001:2026 Internal Auditor Training
ISO 9001:2026 Key Changes Awareness Training
Understanding and Managing Health & Safety Legal Compliance
Understanding and Managing Environmental Legal Compliance
ISO 14001:2026 Key Changes Awareness Training
Waste Duty of CareSINGLE SIGN-ON
The Legislation Update Service now supports single sign-on (SSO), so your team can sign in using your organisation’s own identity provider. This page is a short overview for your IT team of what we support and the setup process.
We support almost any SSO provider through OIDC (OpenID Connect) or SAML 2.0. That includes Microsoft Entra ID, Okta, Google Workspace, Auth0, Cisco Duo and many others.
If your organisation has a preference for one protocol, we’re happy to work with it. If you don’t, we recommend OIDC.
Please note: we do not support Just-in-Time (JIT) provisioning or SCIM provisioning at this time. Adding and removing users, and changing their permission levels, still takes place within the Legislation Update Service.
We also do not support IdP-initiated login at this time. We can, however, provide a URL that redirects a user straight to your organisation’s IdP, so they skip the initial email-entry page in the Legislation Update Service.
From your Account Portal, you’ll need to confirm ownership of your organisation’s domain. This is the domain used in your users’ email addresses (In Entra ID terms, the mail attribute — not your UPN domain, where the two may differ).
Simply add your domain name, then we give you a TXT record to add to that domain’s DNS zone.
Once the record is live, the domain can then be verified in the portal with the Verify button.
Does your organisation use more than one domain name for your users’ primary email addresses?
Don’t worry! Just add the other domain name(s) and complete the verification for each one.
After your domain is verified, head to the Setup SSO button in your Account Portal. This will take you to our setup wizard.
In the wizard, select your identity provider and the protocol of your choice (OIDC or SAML).
If your provider is not listed, you can set up with one of our generic provider wizards at the end of the list.
The wizard will guide you through the setup for your chosen provider.
For OIDC: In your identity provider, remember to set the client secret with an appropriate expiry, and keep a process for spotting secrets nearing expiry so you can send us a new value before it lapses. If a secret expires, SSO will stop working.
Once the wizard is complete, click the Create Identity Provider button.
The wizard will provide a login validation URL. Open this in a separate browser or incognito/private browsing window and sign in with your identity provider.
If successful, a confirmation message will be displayed.
SSO is now enabled for your organisation’s users.
