The following is an example using the configuration values that were filled in for CCSF's integration with Canvas. This document illustrates configuring your Canvas site to go straight to your college/district IdP. The updates below will route your college/district IdP through the CCC IdP Proxy instead. The following values will need to be updated in order to implement this change:
...
There is a dropdown with multiple choices, You want to choose one of the two 'eduPersonPrincipalName' choices. That has to match what you fill into the LOGIN_ID in the Canvas provisioning feed. Do NOT choose "NameID".
* Identifier Format: urn:oasis:names:tc:SAML:2.0:nameid-format:transient
choose Choose the above value from the drop-down and Save your changes. The drop-down should have the following set of choices:
* You can leave the rest of the fields empty or populated with the default value. The exception is the Position field which applies if you are going to allow multiple ways of logging in, which won't be available once you convert. If you only have one form of Authn configured, then the Position does not apply. Otherwise, you probably want SAML listed first, so you should set Position to '1' in the drop-down:
These are all the fields you'll see that the above applies to:
Testing
Start at your equivalent ofTesting should occur on the Test/Beta site that has been established for your college. An example of a test url is: https://ccsf.test.instructure.com/login/saml You will need to replace the correct values associated to your college test site in order to successfully test the changes.