What is the SSO Gateway (GW) and why is it important?

Significance of the CCCID to OpenCCC Federation:

The CCCID is used for multiple purposes across the California Community Colleges.

The CCC Chancellor's Office and other systemwide organizations rely on the CCCID to track progress and the educational choices made by students across the course of their academic journey. Students that attend multiple colleges across the system are tracked in one central location (OpenCCC Student Account System) and their CCCID will be used for research (locally and systemwide) to better align support and services across the system.

In order to track students through their CCCID, the objective of the SSO GW is to ensure that every CCC student has a CCCID. Therefore, as part of the SSO GW integration, it is strongly recommended that colleges store the CCCID in their Active Directory or LDAP directory in order to pass this attribute with the EPPN with the student user session when authenticating to a CCC web application, such as Canvas and CCC MyPath.

Benefit for colleges:

• Ensures all students have CCCID accounts

• Passes and stores student CCCID to CCC applications

• Single Service Provider for all applications
  
  

Benefit for students:

• CCCID allows students to participate in CCC applications

• Data is tracked across colleges & applications

• One set of login credentials to remember

• Facilitates single sign-on for the student
  
  

Systemwide benefit:

• Track students from high school with SSID (CA Dept Ed)

• Ties swirling students data together

• CCCIDs can be shared with CSU and UC
  
  

Student Services

Why am I seeing this message?

Some web applications you access might redirect you to OpenCCC (see the screenshot below).  Canvas is one of those applications that might send you to this screen when you are attempting to access it for the first time this term. Don't panic. This is expected and should only happen once on your first attempt at accessing Canvas or other OpenCCC web applications.

Here's the reason:

The California Community Colleges Identifier (CCCID), provided by OpenCCC, is required for applications like Canvas. If you have a CCCID, your college will send this information to Canvas. However, if you never generated a CCCID when you enrolled, you will need to register with OpenCCC to gain a CCCID. After registration, you will be redirected to the application you were attempting to access (like Canvas), and won't see the OpenCCC screen again. If you have an OpenCCC account, have received a CCCID in the past, and are still seeing this screen, it is possible your college doesn’t have this information. Login or recover your account. Your CCCID will then be linked to your user ID and this screen will not interrupt your session again.

For a more in-depth look at the process, please visit the support page below.

https://cccnext.jira.com/wiki/spaces/CSF/pages/153255940/SSO+Proxy+Step+by+Step+Demonstration

Faculty

Why am I getting redirected to OpenCCC? I thought this was only for students missing a CCCID.

If you are a Faculty or Staff member and you are experiencing the OpenCCC redirect, you are most likely listed as a student in your college's SIS.  This isn't uncommon and many SIS's will list you as a student if you have ever taken a course.  If you have an OpenCCC account, please login and you won't see the redirect again.  If you haven't created an account, please do so.  If you want to avoid the redirect you will need to notify your IT staff for assistance.

Admissions & Records

How can we prevent confusion when students missing a CCCID experience the redirect to OpenCCC?

Explaining the SSO GW and OpenCCC redirect for students missing a CCCID in advance is extremely important.  Identifying students missing a CCCID from your SIS and notifying them to obtain a CCCID in advance is also helpful.  The below URL gives you a direct mechanism to link your student's ID to a CCCID if it's missing.

URL Mapper URLs through the SSO Gateway

IT 

Are we integrated with the SSO GW?  What should we do to make sure we are ready to access Canvas through the SSO GW?

Make sure you are passing the correct values for the eduPersonAffiliation SAML attribute.  If you are pulling this value from your SIS, it's important to note that your staff could also be listed as students which would require them to have a CCCID.  To avoid this, remove the student value from LDAP or educate staff/faculty that they will experience the OpenCCC redirect.  

Check to make sure students that have a CCCID in your SIS also have that value listed in LDAP.