Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This document illustrates configuring your Canvas to route your college/district IdP through the SSO proxy. To do that, the following values will need to be updated in order to implement this change:

...

Canvas recommends that you first implement the changes on your Test/Beta site and ensure it is working correctly there prior to configuring it on your Production site. Please be aware that every few weeks, Instructure replaces your Test/Beta site config with your Production config, so you might have to repeat configuring the below multiple times if it takes longer to complete your verification testing.

...

Info

This document tells you how to navigate to the page that has the SAML config options on it:

      https://community.canvaslms.com/docs/DOC-4284


Configuration Steps

Step 1- Click on "Authentication" in the left-hand pane of this screen: 

...

    There is a drop down with multiple choices, You want to choose one of the two 'eduPersonPrincipalName' choices. That has to match what you fill into the LOGIN_ID in the Canvas provisioning feed. Do NOT choose "NameID".

 
* Identifier Format:  urn:oasis:names:tc:SAML:2.0:nameid-format:transient

Choose the above value from the drop-down and Save your changes. The drop-down should have the following set of choices:

...