The following is an example using the configuration values that were filled in for CCSF's integration with Canvas. This document illustrates configuring your Canvas site to go straight to your college/district IdP. The updates below will route your college/district IdP through the CCC IdP Proxy instead. The following values will need to be updated in order to implement this change:
...
Step 1- Click on "Authentication" in the left-hand pane of this screen:
Image Removed
Image Added
Then click on SAML in the right-hand side of the subsequent screen:
Image Removed
Image Added
Image Added
That will bring you to the main "SAML configuration form". The following information should be placed in the fields:
...
There is a dropdown with multiple choices, You want to choose one of the two '
eduPersonPrincipalName' choices. That has to match what you fill into the LOGIN_ID in the Canvas provisioning feed.
Do NOT choose "NameID".
Image Removed
* Identifier Format: urn:oasis:names:tc:SAML:2.0:nameid-format:transient
Choose the above value from the drop-down and Save your changes. The drop-down should have the following set of choices:
Image Removed* You can leave the rest of the fields empty or populated with the default value. The exception is the Position field which applies if you are going to allow multiple ways of logging in, which won't be available once you convert. If you only have one form of Authn configured, then the Position does not apply. Otherwise, you probably want SAML listed first, so you should set Position to '1' in the drop-down:
Image RemovedThese are all the fields you'll see that the above applies to:
Image Removed
Image Added
Image Added
Image AddedTesting
Testing should occur on the Test/Beta site that has been established for your college. An example of a test url is: https://ccsf.test.instructure.com/login/saml You will need to replace the correct values associated to your college test site in order to successfully test the changes.
...