We are introducing an update to the Training Workflow that gives administrators more control over how employees authenticate when accessing training assignments.
This update is designed to help organizations move toward more secure and centralized authentication workflows, while also improving the user experience for employees completing training.
Why We Are Making This Change
Many organizations prefer to authenticate users through their existing identity systems rather than relying on magic links sent through email.
While magic links are simple to use, they can sometimes create challenges such as:
Expiring or volatile links
Accidental link activation by email security scanners
Employees forwarding personalized training links to others
Multiple authentication experiences across systems
This update introduces additional authentication options so organizations can align training access with their preferred identity management approach.
What Is Changing
Configuration options for the Administrator.
Administrators will now be able to choose how employees authenticate when accessing a training assignment.
Available options include:
1. Magic Link Authentication (Default)
This is the method currently used today.
Employees receive a secure magic link in their email that allows them to access the assigned training directly.
2. Authentication URL
Employees authenticate through your organization's Identity Provider (IdP) / Right-Hand portal login page before accessing training.
This method allows organizations to maintain a single centralized authentication workflow across all applications.
Our Recommended Approach
For most organizations, we recommend using SP-Initiated Authentication URLs.
Benefits include:
Consistent authentication experience with other enterprise applications
Eliminates expired magic link issues
Prevents training links from being shared between employees
Aligns with enterprise identity management practices
Improves the auditability of training access
Magic links will remain available for organizations that prefer email-based access workflows.
User Experience Improvements
Along with authentication options, several improvements have been made to the training experience.
1. Clearer Training Access Messaging
Employees will now see a Start Training button with messaging that clearly indicates the intended recipient of the training link and company branding.
This helps reduce confusion when links are forwarded between employees.
2. Improved Magic Link Handling
Previously, accessing an expired magic link automatically generated a new link.
With this update:
Expired links will show a Request New Link option
A new link will only be generated when the user explicitly requests it
This prevents accidental link generation caused by:
Open browser tabs
Email security scanners
Automated link previews
3. Certificate Request After Training Completion
If an employee has already completed their assigned training, they will now have the option to:
Request their certificate to be sent to their inbox.
Magic Links vs Authentication URLs
Feature | Magic Link | Authentication URL |
Login Method | Email link | Identity Provider/ Portal login |
Link Expiration | Yes | No |
Link Sharing Risk | Possible | Prevented |
Centralized Authentication | No | Yes |
Recommended for Enterprise | No | Yes |
What Employees Will Experience
If Magic Links Are Used
Employees will:
Receive a training email from Training Campaign / Automation with a secure access link
Click Start Training
Complete the training
Post completion the employees will receive a Completion Certificate email <Certificate as a png file>
If the link expires, they can request a new link from the training page.
If Authentication URLs Are Used
Employees will:
Be redirected to their organization's Authentication URL
Authenticate using their credentials
Access their assigned training
Post completion the employees will receive a Completion Certificate email <Certificate as a png file>
How Administrators Can Test the New Workflow
Once the update is released, administrators can test the new authentication options by:
Navigating to Training Settings
Selecting the desired Authentication Mode
Sending a test training assignment to a user using a test campaign
Verifying the authentication flow from the employee experience.
We recommend testing with a small group before rolling out the new configuration organization-wide
When This Update Will Be Available
This update will be released at the end of March 2026.
No immediate action is required. Your current training assignments will continue to work as expected.
Once the update is available, administrators can configure their preferred authentication method directly within the training workflow settings.
Summary
This update provides:
Flexible authentication options for training access
Improved employee experience
Better alignment with enterprise identity systems
Reduced risk of link sharing and accidental access
These improvements are part of our ongoing effort to make training more secure, reliable, and aligned with enterprise security practices.
Questions? Reach out to your CSM or contact [email protected]