Admin and security
Your brand. Your boundary. Your rules.
Sonara was built for organizations that answer to auditors, regulators and their own security teams. Administrators decide who gets in, what they can see, and where workspace content is processed.
Sign-in
Single sign-on
Connect your identity provider with OpenID Connect or SAML 2.0, per workspace. You choose which email domains may use it, whether new people get an account on first sign-in, and whether their groups set their organizations.
Require single sign-on
Optionally close password sign-in for everyone who should use your identity provider. Administrators keep a password path, protected by two-factor, so nobody is locked out.
Two-factor
Codes from an authenticator app, with one-time recovery codes. Administrators can require it for administrators or for everyone, with a grace period to set it up, and can reset it for a person who lost their device.
Smart-card sign-in
CAC and PIV certificate sign-in is available on dedicated deployments.
People and access
SCIM provisioning
Your identity provider can create, update and deactivate people, and manage groups as organizations, through SCIM 2.0. Deactivating someone ends their sessions at once and keeps their records.
CSV roster import
Upload a spreadsheet of people with their team, organizations and role. Sonara checks every row and shows a preview before anything is created, then sends invites or sets up single sign-on accounts.
Roles
Administrators, course creators and learners, plus per-course collaborators who can view or edit.
Approvals
New accounts wait for an administrator. So do suggested course changes.
Organizations
Group people into organizations and limit courses to the organizations they apply to.
Visibility
Security audit log
Sign-ins, failures, two-factor and single sign-on events, provisioning and administrative changes, with CSV export.
Usage and estimated cost
Model, voice and media usage for the workspace, with an estimate of what it cost.
Plan limits
The workspace's plan, its limits and current usage, in one place.
Data controls
Data residency
A workspace can be set to AWS-only processing, where the deployment supports it. Requests that would reach a provider outside AWS are refused, not rerouted.
Delete a person's data
Administrators can remove a person's learning data from the workspace.
Isolated workspaces
Each workspace's people, courses and records are kept apart from every other.
White-label
Your logo, colors, type, corner style and address, with your own instructor persona.
Connected to the systems you run
Launch courses from your LMS with LTI 1.3, or export SCORM 1.2, SCORM 2004 and cmi5 packages, and send xAPI statements to your own learning record store. See LMS integration for the details.
Related
Security
How Sonara is hosted and protected: AWS hosting, encryption, workspace isolation, single sign-on, two-factor, SCIM, audit logs, data residency and sub-processors.
LMS integration (LTI 1.3, SCORM, cmi5, xAPI)
Launch Sonara courses from your LMS with LTI 1.3 or SCORM and cmi5 packages, send scores back to the gradebook, and send xAPI statements to your learning record store.
Government and regulated industries
Training for government and regulated teams: dedicated deployments, CAC/PIV, single sign-on and two-factor, AWS-only processing, audit logs and tamper-evident records.