• How to create deep links to the Courses when using SSO/SAML
• How to create deep links to the Learning Paths when using SSO/SAML
• How to create deep links to the Collections when using SSO/SAML
• The Learners are not able to access the content using the Direct Link from Course/Learning Path Settings.

Relaystate parameter can be appended with the user access URL as the below example:
https://IdP-sign-in.your-idp.com/saml/idp/litmos?RelayState=https://domain.litmos.com/course/12345

Where: 

• https://IdP-sign-in.your-idp.com/saml/idp/litmos : Your SSO sign in page (do not actually use 'https://IdP-sign-in.your-idp.com';)
• &RelayState= : Relay state parameter
• https://yourdomain.litmos.com/course/12345 : Your Litmos URL for the course (do not actually use 'yourdomain.litmos.com'. If you are on the AU region, please remember to have the Litmos Domain as litmos.com.au, and for the EU region, please remember to have the Litmos Domain as litmoseu.com)
  Note: If you are using a custom domain, replace yourdomain.litmos.com with your actual custom domain URL. Do not keep it in the yourdomain.litmos.com format.

The URL for deep links in Litmos should follow the formats below: 

When using the direct link for Courses

OKTA
https://Domain.okta.com/app/litmos/exkfxcjddb23t0uKk0h7/sso/saml&RelayState=https://yourDomain.litmos.com/course/12345

OneLogin
https://domain.onelogin.com/trust/saml2/http-post/sso/742576&RelayState=https://yourDomain.litmos.com/course/12345

ADFS
https://IDP-URL/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID=https://yourDomain.litmos.com/integration/splogin&RelayState=https://yourDomain.litmos.com/course/12345

Azure
https://myapps.microsoft.com/signin/e194e68a-8c99-4e80-b6db-dc518c47f0fd?tenantId=your-tenantID&RelayState=https://yourDomain.litmos.com/course/12345

Other IDPs
https://IdP-sign-in.your-idp.com/saml/idp/litmos&RelayState=https://yourDomain.litmos.com/course/12345 

When using the direct link for Learning Paths

OKTA
https://Domain.okta.com/app/litmos/exkfxcjddb23t0uKk0h7/sso/saml&RelayState=https://yourDomain.litmos.com/learningpath/LearningPathID

OneLogin
https://domain.onelogin.com/trust/saml2/http-post/sso/742576&RelayState=https://yourDomain.litmos.com/learningpath/LearningPathID

ADFS
https://IDP-URL/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID=https://yourDomain.litmos.com/integration/splogin&RelayState=https://yourDomain.litmos.com/ learningpath/LearningPathID

Azure
https://myapps.microsoft.com/signin/e194e68a-8c99-4e80-b6db-dc518c47f0fd?tenantId=your-tenantID&RelayState=https://yourDomain.litmos.com/home/learningpath/LearningPathID

Other IDPs
https://IdP-sign-in.your-idp.com/saml/idp/litmos&RelayState=https://yourDomain.litmos.com/learningpath/LearningPathID 

When using the direct link for Collections

OKTA
https://Domain.okta.com/app/litmos/exkfxcjddb23t0uKk0h7/sso/saml&RelayState=https://yourDomain.litmos.com/home/LitmosCollection/LitmosCollectionID

OneLogin
https://domain.onelogin.com/trust/saml2/http-post/sso/742576&RelayState=https://yourDomain.litmos.com/home/LitmosCollection/LitmosCollectionID

ADFS
https://IDP-URL/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID=https://yourDomain.litmos.com/integration/splogin&RelayState=https://yourDomain.litmos.com/home/LitmosCollection/LitmosCollectionID

Azure
https://myapps.microsoft.com/signin/e194e68a-8c99-4e80-b6db-dc518c47f0fd?tenantId=your-tenantID&RelayState=https://yourDomain.litmos.com/home/LitmosCollection/LitmosCollectionID

Other IDPs
https://IdP-sign-in.your-idp.com/saml/idp/litmos&RelayState=https://yourDomain.litmos.com/home/LitmosCollection/LitmosCollectionID   

Note for ADFS: The above formats is before encoded. As the URL for direct link when using ADFS must be encoded, after encoded the URL link will seem as below: 

https://IDP-URL/adfs/ls/idpinitiatedsignon.aspx RelayState=RPID%3Dhttps%253A%252F%252FLitmosDomain.litmos.com%252Fintegration%252Fsplogin%26RelayState%3Dhttps%253A%252F%252FLitmosDomain.litmos.com%252Fcourse%252FCOURSE%2520ID

Google Chrome Version 85 and greater: Deep Linking with ADFS will not work if your ADFS server has not specified a referrer policy. 

Please see the below link to learn about the security changes that Chrome has made in these later versions: https://developers.google.com/web/updates/2020/07/referrer-policy-new-chrome-default

Chrome has changed the default referral policy (ie: how it behaves if no policy is specified) from "no-referrer-when-downgrade" to "strict-origin-when-cross-origin" in v85 and later version which is why this issue has emerged.

Important notes: 

• In case this deep link will be used in the New course assigned email template, you can use the [COURSE_ID] placeholder: https://IdP-sign-in.your-idp.com/saml/idp/litmos&RelayState=https://domain.litmos.com/course/[COURSE_ID]
• The Course or Learning Path needs to be in the Course Library, or assigned to the learner directly for the redirect to work. If it isn't, the learner will get a lockout error
• Customers on our Australian and European Data Centers will need to use their respective Litmos domains (yourDomain.Litmos.com.au or yourDomain.LitmosEU.com)
• exkfxcjddb23t0uKk0h7 is an example Litmos App ID, you will use your own unique App ID generated by Okta for the Litmos App to use in the direct link. This is found in the Metadata