Absorb LMS

The Corma integration for Absorb LMS keeps learner accounts in step with HR and puts admin roles under regular review, so the people who can change courses, reports and portal settings are the ones who should. It suits HR, L&D and IT teams that run onboarding and compliance training in Absorb.

Key takeaways

• Absorb LMS ships four default admin roles (System Admin, Admin, Instructor and Reporter), and System Admins can create custom roles scoped to departments.
• Users created in Absorb through SAML or OpenID Connect single sign-on get learner access only, so every admin role is granted separately.
• Deactivating an Absorb user blocks login, while deleting the user also removes their enrollments.

How do users get into Absorb LMS?

Absorb offers several entry points. SAML 2.0 and OpenID Connect can create accounts just in time at first login. SCIM with Okta or Microsoft Entra ID can create and update users and assign admin roles. HR connectors cover Workday, SAP SuccessFactors, Personio and HiBob, and scheduled user imports can deactivate people based on a termination date.

The Integration API authenticates with a private key and a token, and deactivates users through their status field. It has no delete endpoint.

Where does access drift in an LMS?

Learner access rarely drifts, because it follows the HR feed. Admin access does. Roles are granted by hand to a trainer for a project or to a manager for reporting, and nobody removes them afterwards. A System Admin can change portal settings and impersonate other admins, which makes the role worth checking every quarter under the principle of least privilege.

Offboarding has its own trap. Training records are audit evidence: ISO/IEC 27001:2022 control 6.3 covers security awareness training, and NIS2 lists cybersecurity training among its risk management measures. Deactivate leavers rather than deleting them, since deletion removes their enrollments.

What Corma automates for Absorb LMS

• HR-driven lifecycle: new hires get their learner account from the HR record and leavers are deactivated on their last day, a flow HR teams can run without IT tickets.
• Admin role reviews: System Admin, Admin, Instructor and Reporter holders go into automated access reviews, with each manager's decision recorded.
• Movers: when someone changes department, Corma flags the admin roles still scoped to their old department.
• Audit-ready history: every grant, change and deactivation is logged, following the approach in our ISO 27001 and IAM guide.

Absorb LMS integration FAQ

Does Absorb LMS support SCIM?

Yes. Absorb documents SCIM with Okta and Microsoft Entra ID, which can create and update users and assign admin roles. A SCIM delete in Absorb is a soft delete. Corma works alongside SCIM and adds the reviews and approvals SCIM does not provide.

Should we deactivate or delete former employees in Absorb?

Deactivate. An inactive user can no longer log in. Deletion also removes the user's enrollments, and Absorb's help pages differ on whether it can be undone, so keep it for cases your retention policy requires.

Where is Absorb LMS data hosted?

Absorb hosts customer data in one of five regions chosen at onboarding, Ireland included, with backups kept in the same region. Corma runs on AWS inside the European Union and is ISO/IEC 27001:2022 certified.

Using Absorb for compliance training? Book a demo to see admin reviews and leavers handled in one place.