Custom build
IdP-Initiated SAML
Sign in, starting from your IdP.
How do you teach?
Your staff start every app from your identity provider, but Pencil Spaces makes them start from its own sign-in page. We build IdP-initiated SAML, so staff sign in from Okta, Keycloak or Azure AD the way they do today.
Your tutors open every tool from Okta, except Pencil Spaces. We build IdP-initiated sign-in, so they start from your identity provider like everything else.
Teachers launch every app from your identity provider, then hit a separate sign-in for Pencil Spaces. We build IdP-initiated SAML to remove that step.
Your staff start every app from Azure AD or Okta. We build IdP-initiated SAML, so Pencil Spaces opens the same way.
Staff in your district start from your identity provider. We build IdP-initiated SAML, so Pencil Spaces opens from there too, alongside the standard sign-in.
Facilitators sign in from your identity provider, as they do for every other tool. We build IdP-initiated SAML for it.
Parents won’t need this. It lets a program’s staff sign in to Pencil Spaces from their own identity provider.
Free for 2 weeks on any paid plan. No credit card required.
What it solves
Helps you
Save time
Part of
Custom
The problem
One app that won’t start from your identity provider
Staff launch every tool from their identity provider’s dashboard. When one tool only starts from its own sign-in page, staff get confused and IT fields tickets.
The usual way
IT writes instructions for the exception, and staff bookmark a separate sign-in page.
How Pencil Spaces solves it
IdP-initiated SAML for staff, starting from your identity provider, such as Okta, Keycloak or Azure AD, the way your team signs in today, alongside the SP-initiated flow supported out of the box.
What changes
Staff sign in to Pencil Spaces the same way they sign in to everything else.
What we build
- IdP-initiated sign-in for staff
- Live within four weeks of your configuration
- Test account, then production
Typical build time: about 4 weeks.
What it looks like
In practice
A tutoring company’s staff click the Pencil Spaces tile in Okta and land signed in. It’s set up on a test account first, then production, live within four weeks of the company’s configuration.
In a 1:1 lesson
Your tutors click Pencil Spaces in Okta and start teaching, with no separate sign-in.
In a group class
Teachers open Pencil Spaces from Keycloak each morning, like every other app.
In a virtual training
Facilitators launch Pencil Spaces from the Azure AD dashboard, and IT closes its sign-in tickets.
In your classroom
District staff open Pencil Spaces from the identity provider they use for everything else.
In the training room
Your workshop leads start from Okta, and Pencil Spaces opens signed in.
At home
Parents won’t see this. It’s how your child’s tutors sign in.
