Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Use of the CCCID requires that colleges or districts pass the CCCID to MyPath, Canvas etc as a SAML attribute in the authorization request from their SAML identity provider.


Expand
titleClick here to read more about the CCCID as a required attribute for CCC SSO initiative...

Colleges that participate in CCCApply have the capability of downloading a CCCID as part of the application download process for a student.  Many colleges that download the CCCID from CCCApply store the CCCID in the student's SIS or Active Directory account which allows them to easily pass CCCID as a SAML attribute.  Colleges that do not use Apply, colleges with students that applied previously to or outside of CCCApply, or colleges that choose not to store the CCCID are unable to pass the CCCID as a SAML attribute.

Because the CCCID is a requirement for participating in the statewide initiatives, the SSO proxy was introduced as a means to associate a CCCID with a Identity Provider authorization request when the CCCID is not available to the college at authorization time.

This CCCID achieved by the SSO proxy intercepting the authorization request, determining if a CCCID was passed as a SAML attribute, and prompting the student to either create a new or recover an existing OpenCCC account if a CCCID was not included in the request.

...



...

Demo - The SSO Proxy: The Student Experience

The following demos illustrate the student user experience when they pass through the SSO Proxy, depending on the college's ability to pass a CCCID as a SAML attribute.

...

Widget Connector
urlhttps://www.youtube.com/watch?v=Flk1VAC5waE&t=18s


Scenario 1: Student Never

...

Sees the Proxy

This scenario illustrates is the most streamlined user experience because it allows students who already have an OpenCCC account (meaning they have a CCCID, even if they don't remember what it is) to login to any secure CCC web application without interruption or interaction with the SSO proxy.  

...