This quick guide explains our SSO functionality for NSW DoE schools, how to set it up, and how logging into Essential Assessment with SSO works for both students and educators.
What is Single Sign-On?
Single Sign-On (SSO) allows students to log in to Essential Assessment using their Department of Education (DoE) email address — the same credentials they use for other school systems. This removes the need for separate EA usernames and passwords.
Keen to get started?
To begin the process of setting up SSO for your school, contact Essential Assessment at [email protected] to request that SSO is enabled for your account.
ℹ️ Note: SSO is configured at the school level by an EA administrator. You will need access to EMU (Education Management Utility) and EA Settings to complete this process.
Overview of Steps
Step 1: Download the Class Login CSV from EMU
EMU (Education Management Utility) holds the Department of Education email addresses linked to each student. You will need to export a CSV from EMU for each class and then upload it into EA.
To export the CSV from EMU:
Navigate to the relevant Roll Class in EMU. The breadcrumb at the top of the page will show the School Code and class name.
Click the EXPORT button in the top-right corner of the Roll Class view.
Select CSV from the dropdown menu.
Save the downloaded file — you will upload this into EA in the next step.
ℹ️ Note: Repeat this export for each class in your school that you wish to enable SSO for. You can upload multiple CSVs — one per class.
Step 2: Upload the CSV in EA Settings
Once you have your CSV(s) from EMU, log in to Essential Assessment and navigate to Settings.
To access the upload area:
Click the Settings button in the top navigation bar.
From the dropdown menu, select Subscription Details.
On the Subscription Details page, you’ll see the Student Emails & SSO section. Click Upload Emails to upload your EMU CSV export.
ℹ️ Note: This process assigns DoE email addresses to each matching student account in EA. Once uploaded, the email addresses will be visible when viewing that student in Edit Class.
Step 3: Run the SSO Readiness Check
After uploading your CSV(s), use the Readiness Check feature to verify that student emails have been successfully assigned. This tool will identify any students who are missing a valid email address.
To run the check:
On the Subscription Details page, locate the Student Emails & SSO section.
Click Readiness Check (next to the Upload Emails button).
EA will scan all active students and report how many have valid emails assigned.
The results screen will show:
The total number of active students checked.
How many have valid emails assigned.
A list of students without valid emails, including their name and class.
ℹ️ Note: A status of 'Not ready' means some students are still missing emails. This is common if student names in EA differ slightly from how they appear in EMU, or if some classes were not yet exported. For a comprehensive view of missing emails, navigate to the Export Student List option:
Step 4: Review and Resolve Missing Emails
If the Readiness Check identifies students without valid emails, there are two common reasons:
The student was not included in any of the uploaded CSV exports (i.e., their class was not exported from EMU).
The student's name in EA does not exactly match the name in the EMU export, so the system could not match them.
To resolve this:
Export the relevant class from EMU and re-upload the CSV in EA Settings.
If a name mismatch is suspected, check the student's name in EA (via Edit Class) against their name in EMU and update as needed before re-uploading.
Run the Readiness Check again after any updates to confirm the issue is resolved.
Once all students have valid emails, the Readiness Check will show a 'Ready' status and students will be able to log in to Essential Assessment using their DoE credentials.
How do Students Sign In with SSO
ℹ️ Note: During the transition period, students will be able to use standard log in methods (username and password; QR code) as well as SSO to log into EA.
Method 1: Windows Laptops
When students sign into EA using SSO, the platform will recognise the student via their Department log in. The students will follow the below steps.
Log into their Window laptop.
2. As the students normally do, navigate to app.essentialassessment.com.au/student/ in the browser. Then search for the school code.
3. Instead of entering their Username and Password, the students will need to press the Sign in using SSO button at the bottom of the screen. This will take them to the student page in EA.
Method 2: Signing into iPads
The process for accessing Essential Assessment using SSO is a little different for iPads, due to configuration differences on the DoE Network. To complete their log-in on an iPad, students may be redirected to additional log-in pages.
Make sure EDGE authentication has occurred so that the device can access websites outside of the school.
As the students normally do, navigate to app.essentialassessment.com.au/student/ in the browser. Then search for the school code.
3. Students will be directed to a Department log in page where they will need to enter their FULL email address. Once this is verified, then they will be taken to a separate page to enter their password (User Account will be pre filled). Once this is completed, they will be taken to their profile in EA.
How do Educators Sign In with SSO
ℹ️ Note: During the transition period, educators will be able to use standard log in methods (username and password; QR code) as well as SSO to log into EA.
Method: Windows Devices
When educators sign into EA using SSO, the platform will recognise the student via their Department log in. To complete this sign in option, educators will need to enter their department email address. After this is completed, an option will appear to “Sign in Using SSO”. Selecting this option will allow the educator to enter Essential Assessment without needing to enter a password