Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The following is an example using the configuration values that were filled in for CCSF's integration with Canvas. This document illustrates configuring your Canvas site to go straight to your college/district IdP. The updates below will route your college/district IdP through the CCC IdP Proxy instead. The following values will need to be updated in order to implement this change:

...

* IdP entityID:  https://idp.ccsf.edu/idp/shibboleth (Example- please use your colleges version)
    Note: this is the value of the 'idp.entityID=' property in the IdP's conf/idp.properties file and in your IdP's metadata.

* Log On URL: https://idp.ccsf.edu/idp/profile/SAML2/Redirect/SSO (Example- please use your colleges version)
   Note: this is the Location value from the following entry in your IdP's metadata:
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ccsf.edu/idp/profile/SAML2/Redirect/SSO"/>  

* Log Out URL:  https://idp.ccsf.edu/idp/profile/Logout        (Example- please use your colleges version)
   Note: Only enter this if you want the user logged out of your IdP after logging out of Canvas.

...

    There is a dropdown with multiple choices, You want to choose one of the two 'eduPersonPrincipalName' choices. That has to match what you fill into the LOGIN_ID in the Canvas provisioning feed. Do NOT choose "NameID".
 
* Identifier Format:  urn:oasis:names:tc:SAML:2.0:nameid-format:transient

Choose the above value from the drop-down and Save your changes. The drop-down should have the following set of choices:

...