Is there a way to simultaneously use two different authentication types?

[ewest]

Is it possible to use CAS and SAML simultaneously for authentication? I'm only seeing options to position them (1,2 3, 4 etc.), with "1" as a default.

What I'm really looking for is a user to have the ability to pick how they would sign on between CAS and SAML. Any ideas or possibilities out there?

Thanks!

Evan

[mzimmerman · Accepted solution]

Hi Evan,

The way to allow users to select between multiple authentication sources is to use a "discovery page" in the SSO settings under Authentication.

Each different authentication provider that you set up in Canvas gets its own URL assigned  So, set up both SAML and CAS providers, and make note of the URLs.  They will be something like https://<canvas server>/login/saml/2 , etc.

Then, create an HTML page on an external server that includes links to each of the different Canvas authentication provider URLs.  Instead of using the order of the authentication providers in the Canvas list, you can put the URL of the "login page" under SSO Settings > Discovery URL, and instead of being automatically directed to the first authentication provider in the list, when they connect to the main Canvas URL, they will be directed to the "discovery"/Canvas login section page that you have set up.

Mike

[ewest]

Thanks Michael! That's very helpful.

[mzimmerman]

@mcotterman has a helpful article on Discovery Pages athttps://community.canvaslms.com/docs/DOC-14067-why-a-discovery-page-also-what-is-a-discovery-page 

Mike