Single Sign-On Settings (SSO)

Create SSO settings for a third party application

Settings for an SSO can't be deleted.

Select Core.
Select Security .
Select Authentication settings.
Select SSO settings.
Select the + Add new
Select Allow this SSO to be used to enable or activate the settings.

Note: Clear the option if the SSO should not be used. Although you can't delete SSO settings, you can deselect this option to disable or inactivate it.
Enter a brief descriptive Name.

A Slug is automatically generated based on the name. Spaces in a name are replaced by hyphens (-) in the slug.
Enter the Redirect URL. Be sure for format the URL so that the following parameter information is appended to the end of the URL:

?ssotoken={token}
An alphanumeric Secret key is automatically generated. You'll use this in your custom implementation. Copy it to a safe location for later use.
To enable platform managers to impersonate other users and SSO into the application with a different identity, select Allow impersonate. Otherwise, clear this option.
Select Save.

Edit SSO settings

Although you can't edit a Secret key or Slug, you can rename the settings, update the URL, change impersonation rights, and enable or disable usage.

Select Core.
Select Security .
Select Authentication settings.
Select SSO settings.
On the row of the existing credentials for a provider, select Edit.
Select Allow this SSO to be used to enable or activate the settings.

Note: Clear the option if the SSO should not be used. Although you can't delete SSO settings, you can deselect this option to disable or inactivate it.
Enter a brief descriptive Name.

The Slug based on the original name remains unchanged.
Enter the Redirect URL. Be sure for format the URL so that the following parameter information is appended to the end of the URL:

?ssotoken={token}

and replace "token" with an assigned token.

Note: Learn more about generating tokens.
To enable platform managers to impersonate other users and SSO into the application with a different identity, select Allow impersonate. Otherwise, clear this option.
Select Save.

Disable or inactivate SSO settings

Your school may want to disable some SSOs at specific times of the year, such as during summer vacation or while your administrator makes significant changes to the other application's settings.

Select Core.
Select Security .
Select Authentication settings.
Select SSO settings.
On the row of the existing credentials for a Provider, select Edit.
Clear the Allow this SSO to be used option.
Select Save.

To re-enable the SSO, edit it and allow usage again. The original settings remain unchanged.

Re-enable or re-activate SSO settings

Your school may want to re-enable some SSOs at specific times of the year, such as after summer vacation or after a major change to the other application's settings.

Select Core.
Select Security .
Select Authentication settings.
Select SSO settings.
On the row of the existing credentials for a provider, select Edit.
Select the Allow this SSO to be used option.
Select Save.

Clear the option if the SSO should not be used. Although you can't delete SSO settings, you can deselect this option to disable or inactivate it.

Copy a secret key

To enable a enable a third party to access your school's data, you must provide them with secure tokens that they'll use to authenticate to your site.

Select Core.
Select Security .
Select Authentication settings.
Select SSO settings.
On the row of the existing credentials for a provider, select Edit.
Use your computer's built-in functionality to select and copy the Secret key.
Select Save or Cancel.

Provide the Secret key to the third party vendor.