SSO login from third party web app

[davidgeismar1]

 My use case is the following. I have a web app where users can create account and login. I would like to directly redirect them from that app to canvas without asking them to login again.

I have achieved that with other LMSs using SSO JWT token. Basically I would generate from the third party web app some JWT encoding the user's lms email with a secret shared between the third party app and the LMS. I would then pass that token in the redirect url as a ? parameter and the redirected user would be directly logged in into the lms.

Is there a similar thing I can do with Canvas LMS ?

[chriscas]

Hi @davidgeismar1,

There is some documentation about authentication for Canvas at  How do I configure third-party authentication prov... - Instructure Community .  It sounds like you've been doing something different than having a full third-party SSO provider though, so I'm honestly not sure if anything like your method would work in Canvas.  I've moved your post over to the Developers Group, where some super tech-savvy Canvas users who may know more about this tend to hang out.  Hopefully someone will be able to chime in and either confirm my response or provide some other methods for you.

-Chris

[davidgeismar1]

@chriscas Thanks for your answer. 
Indeed, I don't need a button "log in with web app" on the canvas login page. users should still be able to authenticate into canvas with their canvs email/password. 
The only thing I want is the ability to generate a secure link from the external webapp to let the user directly logged in into their canvas account without having to reauthenticate with their canvas login/password.