Hi all,
We’re looking at adding Course Merchant (CM) to our Brightspace (BS) environment and I’m struggling to find detail on how learner sign-in works across the two.
Our situation: We run BS without CM. Learners currently sign in through a third-party managed Azure-based login platform linked to BS, which is costly. We’re weighing that against BS’s built-in login (and its 2FA) if it’s good enough, and against moving to our institution’s Entra ID.
What we’ve found so far: D2L’s documentation covers 2FA for BS local login (authenticator app, or emailed code if enabled), and SAML SSO. It says little about how CM fits in. D2L’s CM support page says SSO into BS is included but SSO into other platforms (SAML/OIDC) costs extra.
Questions for anyone running CM:
- Does CM use whatever BS login is configured (SSO or local with 2FA), or does it need its own identity provider connection?
- If you use BS’s built-in login, how has 2FA worked for learners? Do they get a code on every sign-in, or does the device stay trusted for a period?
- When someone buys a course and has no BS account, how are accounts created and matched against existing users, and have you had duplicates?
- Was the extra SSO charge something you paid, and which CM edition are you on?
Experiences and opinions would be very welcome. Thanks :)
