In Authentication Settings, you can manage SSO, Canvas self registration, control Multi-Factor Authentication (MFA) requirements. You may also be able to customize password requirements and manage login attempt details.
By default, users can login in directly to Canvas using Canvas authentication. However, all Canvas users must have a Canvas account before they can log in to Canvas.
Canvas authentication includes an option called self registration, which displays a registration banner on your account login page that allows users to create their own Canvas accounts. You can also require users to complete a Captcha form before completing the registration process.
Canvas authentication can be used without self registration. For instance, some institutions want to create user accounts with a student information system (SIS) and import SIS data into Canvas but allow users to log in using the default Canvas login page. Canvas authentication also supports Single Sign On (SSO) authentication, which allows you to customize your login information, and can be used in addition to third-party authentication providers.
Notes:
- Canvas authentication can only be deleted from the authentication page if another third party authentication provider has been enabled. If the only existing authentication provider is deleted, Canvas authentication will be restored as the default provider.
- Unless customized, Canvas authentication passwords require a minimum of eight characters.
Open Account
Click the Admin link [1], then click the name of the account [2].
Open Authentication
In Account Navigation, click the Authentication link.
Configure SSO Settings
In Authentication Settings, you can configure third-party authentication providers [1].
You can also configure Single Sign On (SSO) settings for your authentication provider [2].
Configure Self Registration
By default, Self Registration is disabled. To allow self registration for all users, click the All Account Types radio button [1]. All accounts includes those for students, instructors, and observers.
- For students, self registration is used with self enrollment. When users sign up as a student, a join code is required to access the course. Self enrollment creates the join code, which instructors can give to students to sign up in the course. Learn more about self enrollment options in your account.
- Instructors can sign up for a Canvas account through self registration if your institution does not already create instructor accounts.
To limit self registration to observers (including parents), select the Observer Accounts Only option [2].
To require users to complete a Captcha form before completing the registation process, click the Require Captcha for Self Registration checkbox [3].
To allow users to receive a one-time passcode via SMS, click the Send one-time passcodes via SMS (US carriers only) checkbox [4].
Note: If the All Account Types option is selected, it is recommended to require users to complete a Captcha form to avoid the creation of spam users.
Manage Passwords Options
If the Enhance password options setting is enabled in Account Feature Options, you can customize passwords and control login attempts in the Password Options section. To manage passwords and login attempts, click the View Options button.
Require MFA
To require Multi-Factor Authentication (MFA), click the Canvas enforces MFA radio button [1].
To allow users choose whether they want MFA, click the User can opt in to MFA radio button [2].
Save Authentication
Click the Save button.
