Page Comparison

Problem / Issue

Butte Colleges has complained that the current design and implementation of the SSO Proxy is problematic and creating barriers for students when they encounter the Proxy if the college doesn't pass the student's CCCID with their EPPN in their IdP metadata, which is a requirement of the Proxy Integration.

The proxy team proposes the following changes to the process and technology:

1. Short-term - implement a visual
2. Fix the EPPN > CCCID report in the Report Center (add the College ID, submit timestamp) - Add a timestamp to Account Creation (September 2018)

Could the ePPN be used to create accounts?

Focus on getting all students their OpenCCC the CCCID

Do we have any deadlines and driving need to get this done? YES - Canvas LMS implementation has now required colleges to integrate with, and use, the proxy service to pass students through to Canvas.

Franz’s suggestion:  CCCID short process - on proxy redirect. Create a very short version of OpenCCC Account Creation, basically to get the user a CCCID and continue them on their way to their end point. 

Suggestions:  Username = personal email address?  Password, and DOB.

The rest of the data could be auto-populated by the college's metadata (First + Last, street, student ID?)

Proposed Solution

Focus on getting all students their OpenCCC the CCCID

Setup a campaign with the ES team - to encourage colleges to implement

Staff is identified correctly with the correct metadata attribute(s)
Active Directory is configured to pass the correct

Part of this plan - whitelist all Canvas URLs while implementing a campaign to encourage colleges and students to get their CCCID

Another suggestion: 

Matt Schroeder suggests:  A count-down issue > redirected to a page that says you do not have a CCCID  but let them get through the first 5 times and each time give a warning to the student. That they will have to do it.

Proxy would be presenting that page - counting down the number of tries left - they would be sending the EPPN regardless - has gone through the proxy you should uniquely identify them;

Still complies with the design of the proxy - but would be least impactful

Implement a notification back to the college if the student hits the proxy and no CCCID is passed - put the responsibility on the college to follow-up, get the CCCID,

What it would do:  It will allow a student without a CCCID to continue to their endpoint without logging in, recovering, or creating their account at that moment - and notify the college that the student hasn’t passed their CCCID

Notes

Supporting Documentation