How does the Microsoft Authentication Method Work?

[eric_allison]

We have added a Microsoft authentication service to our test site, entered our 365 tenant, and selected "email" as the login attribute.  I'm hoping someone here has used this method and can direct us toward a solution.

The 365 accounts each have an assigned email address and our Canvas accounts each have a matching login ID.  For example Paul's 365 account includes the email address paul.willams@example.com and Paul's Canvas account has paul.williams@example.com as a login ID.

Attempted logins result in the following message:  "Authentication with Microsoft was successful, but no unique ID for logging in to Canvas was provided."

Is that unique ID something that 365 is supposed to be handing back to Canvas or something in the Canvas account that matches a 365 attribute other than the email address?

[eric_allison]

Is anybody authenticating using Microsoft O365 credentials or is this a hopeless case?

[navas_basheer]

Hi Folks, 

I got rid of this error by setting "preferred_username" for Login Attribute. See the config screenshot for Authentication.

Hope this will help someone.

Best Regards

Navas

[sgutierrez1]

Unfortunately for me, it just creates new entries in Canvas instead of using the existing account.  We're not using the full email address as our log in ID.  So we'll need to tie the username in Canvas to an email account on Azure AD.

[stuart_ryan]

Hi  @eric_allison ,

 @navas_basheer  has made a great suggestion, have you had a chance to give this a go, and did it resolve the issue for you?

I remember when we first started out, there was a change that our implementation solution engineer from Canvas had to help us with for existing accounts when we were trying out the switch. This is not something we have looked at since, but may be another avenue, through your CSM, if Navas' suggestion doesn't work.

Let us know how you get on!

Cheers,
Stuart

[Robbie_Grant]

 @eric_allison ,

We are giving the Canvas Admins area a little bit of love and just want to check in with you.  This will also bring this question new attention. 

Were you able to find an answer to your question? I am going to go ahead and mark this question as answered because there hasn't been any more activity in a while so I assume that you have the information that you need. If you still have a question about this or if you have information that you would like to share with the community, by all means, please do come back and leave a comment.  Also, if this question has been answered by one of the previous replies, please feel free to mark that answer as correct.

Robbie