InCommon as an authentication provider?

[mzimmerman]

Hi!

We've been investigating options to allow collaborators/guest lecturers/etc. from outside our institution access to our Canvas instance.  One thought that has come up is using InCommon for authentication, after we have created user accounts with the necessary  id@domain login.

I was able to do this a few years ago in Blackboard, but I was running the server locally and had a local discovery service set up under IIS to handle it.  I can't see any way to do something similar in Canvas.

We can point to the InCommon discovery service to get redirected to individual institutions' IdPs, but I'm not seeing a clear way to allow those to be recognized as valid auth providers for existing users.  Is this something that anyone else has looked at?

Thanks!

[mzimmerman]

Hi @Swanson92714 

Yes, I'm familiar with InCommon and federated authentication in general.  

My question is about providing access to Canvas through InCommon federated logins without needing to add an individual SAML authentication source in Canvas for each of the thousands of InCommon members, similar to the way it works for services like EduRoam.