Certificate authentication so military users can login with a CAC card

[RanjeetSingh]

Is it possible to configure certificate authentication directly in Canvas or can that only be done using a third-party identity provider?  More specifically, can Canvas support CAC authentication which requires installing DoD root certificates on the server?

[Jeff_F]

Hello @RanjeetSingh - while this doesn't answer your question I thought I'd share. A few years back we had a training agreement and we opted to create a ColdFusion webform which required use of the .mil email address along with entry of the CAC id number. The form data was used to create the Canvas account and the .mil email and the CAC# were identifiers. Our training was not 'sensitive' nor 'secret' etc. and this worked very well. There were a few instances where people entered incorrect CAC#'s thus creating a duplicate. We referred those back to their command to remedy.

[RanjeetSingh]

Thanks for the response, @Jeff_F!  So your webform triggered the creation of the Canvas account, and then your students would use local Canvas authentication?  Or did they also use your ColdFusion webform to login to Canvas somehow?

[Jeff_F]

Hello, @RanjeetSingh - yes, the webform we used was integrated with the Canvas Users API in order to create the account. The process has the student fill in the form which creates the user account in Canvas. Part of process has the student receive an email verification where they click a link and set the password. They then authenticate via xyz.instructure.com.

Note this was before we had the Catalog product.

[RanjeetSingh]

Gotcha, thanks @Jeff_F !  If we can't figure out certificate authentication, I'll pitch your webform process as an alternative solution.  I appreciate you sharing that!