Skip to main content

Setting up single Sign-On (login with Google/Microsoft)

Updated this week

If your schools uses Sparx Maths and you already have SSO set up in your Sparx Maths site, the settings will automatically be linked to your Sparx Reader site. Any changes made in your Sparx Reader site will affect your other Sparx site(s).

Single Sign-On (SSO) enables teachers and students to log in to multiple websites using one set of login details.

The main benefits of using SSO are:

  • It's simpler to get your students started with Sparx, as they won't need to go through the process of setting up a new username and password

  • Password reset requests are likely to reduce, as students won't need to remember another username and password. This reduces interruption for students and saves you time.

Requirements

Before setting up SSO, ensure that:

  • Your school provides Microsoft Office 365 or Google accounts to teachers and/or students

  • You have student email address set up for each student in your MIS

  • You've granted Sparx access to student email data through Wonde

  • Your school's technical contact will need to be involved in the setup process as they will be asked to approve our request to enable SSO for your school. Many schools provide their technical contact with a Sparx Reader login (you can do this using the Staff Manager page) to help manage SSO settings.

Setup guide


Check your student email data

  1. Go to 'Management' → 'School Settings' → 'Single Sign-On (SSO)'.

  2. If you see a warning message, download the report to identify affected students

  3. Update any missing or incorrect email addresses in your MIS

  4. Wait for the next overnight sync, or perform a manual sync if needed

Configure SSO settings

  1. Go to 'Management' → 'School Settings' → 'Single Sign-On (SSO)'

  2. Choose your SSO provider (Microsoft or Google)

  3. Enter your school's SSO domain (e.g., if [email protected] is your email format, enter example.com)

  4. Optionally enter a different domain for students if needed

  5. Enable SSO for teachers first and click 'Save'

Test teacher access

  1. Log out of Sparx Reader

  2. Attempt to log in using SSO

  3. Teachers will need to verify their email address the first time they use SSO (students will not need to do this step)

  4. The first SSO login attempt will trigger an approval request through your SSO provider - your school's Google/Microsoft administrator will need to approve this.

Enable student access

  1. Once teacher SSO is working, return to School Settings

  2. Enable SSO for students

  3. Choose whether to allow both SSO and username/password login, or SSO only

    • We recommend only allowing SSO to simplify the process for students and reduce teacher workload

Ask your school's IT contact to approve our authorisation request

This step doesn't apply for all schools and will depend on your school's Google/Microsoft account setup.

Google schools

  • If you use Google as your SSO provider, you may need to complete some additional steps to set up SSO in Sparx Reader.

  • The first time a teacher or student attempts to log in to Sparx Reader using their Google account, a request will be sent to the Google Admin console to allow access. You may need to speak to your school’s IT contact or network administrator to help you to complete this step.

  • Teachers and students won't be able to use SSO until this request has been approved, even if you've turned SSO on in Sparx Reader.

  • For more information, see Google's Manage access to unconfigured thirds party apps article.

Microsoft schools

If you use Microsoft as your SSO provider, you may need to complete some additional steps to set up SSO in Sparx Reader

  1. The first time a teacher or student attempts to log in to Sparx Reader using their Microsoft account, your school’s Microsoft 365 administrator will need to approve our request to fully enable SSO

  2. Teachers and students won't be able to use SSO until this request has been approved, even if you've turned SSO on in Sparx Reader

  3. Most commonly, one of two things will happen:

    • If you are a Microsoft 365 administrator for your school, you’ll be asked to approve the request yourself.

    • Or, you’ll receive a message telling you that authorisation is required before you can proceed. In this case, you likely don’t have permission to authorise the SSO setup yourself, but Microsoft will send an email to your school’s Microsoft 365 administrator. Ask them to respond to this email to approve the request.

  4. For more information, see Microsoft's Managing user consent to apps in Microsoft 365 article.


Frequently asked questions


Will enabling SSO create new accounts for my students?

No, SSO simply provides another way to log in to existing accounts.

Can students still use their existing Sparx usernames and passwords?

Yes, unless you choose to disable username/password login.

What should we do if our SSO domain changes?

You'll need to:

  1. Temporarily disable SSO

  2. Update the domain in School Settings

  3. Update teacher emails in Staff Manager

  4. Ensure student emails are updated in your MIS

  5. Wait for the next sync or perform a manual sync

  6. Re-enable SSO

Why are parent contact emails being imported instead of student emails?

If parent emails are being imported instead of student emails, please check:

  • Student emails are entered in your MIS (we check the fields: Primary, Email, Home, Work)

  • The domain entered in your SSO Settings page matches the student email domain

What does this look like on the login page?

If you have both SSO and Sparx logins enabled then teachers and students will be able to choose how they log in:

If you are only using SSO, the login page will be similar to this one but without the username and password options.

Clicking the login button will direct teachers and students to a Google/Microsoft login page where you will need to enter your school login details. If teachers or students are already logged into their school account on their device, they will be directed straight to their account.

Did this answer your question?