DRAFT: The following is an example using the configuration values that were filled in for CCSF's integration with Canvas. And this document currently illustrates configuring your Canvas site to go straight to your college/district IdP. We'll be updating this document to instead illustrate going to your college/district IdP throught the CCC IdP Proxy instead. That will change the:
...
There is a dropdown with multiple choices, You want to choose 'eduPersonPrincipalName'. That has to match what you fill into the LOGIN_ID in the Canvas provisioning feed.
* Identifier Format: urn:oasis:names:tc:SAML:2.0:nameid-format:transient
(choose the above value from the drop-down and Save your changes. The drop-down should have the following set of choices:
* You can leave the rest of the fields empty/whatever is the default value, except maybe for Position. That applies if you are going to allow multiple ways of logging in, which you won't once you convert. If you only have one form of Authn configured, then Position doesn't matter. Otherwise, you probably want SAML listed first, so you'd set Position to '1' in the drop-down:
These are all the fields you'll see that the above applies to:
Testing
...
Start at your equivalent of: https://ccsf.test.instructure.com/login/saml