cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
ewest
Community Contributor

Is there a way to simultaneously use two different authentication types?

Jump to solution

Is it possible to use CAS and SAML simultaneously for authentication? I'm only seeing options to position them (1,2 3, 4 etc.), with "1" as a default.

What I'm really looking for is a user to have the ability to pick how they would sign on between CAS and SAML. Any ideas or possibilities out there?

Thanks!

Evan

1 Solution

Accepted Solutions
mzimmerman
Community Champion

Hi Evan,

The way to allow users to select between multiple authentication sources is to use a "discovery page" in the SSO settings under Authentication.

Each different authentication provider that you set up in Canvas gets its own URL assigned  So, set up both SAML and CAS providers, and make note of the URLs.  They will be something like https://<canvas server>/login/saml/2 , etc.

Then, create an HTML page on an external server that includes links to each of the different Canvas authentication provider URLs.  Instead of using the order of the authentication providers in the Canvas list, you can put the URL of the "login page" under SSO Settings > Discovery URL, and instead of being automatically directed to the first authentication provider in the list, when they connect to the main Canvas URL, they will be directed to the "discovery"/Canvas login section page that you have set up.

Mike

View solution in original post

3 Replies
mzimmerman
Community Champion

Hi Evan,

The way to allow users to select between multiple authentication sources is to use a "discovery page" in the SSO settings under Authentication.

Each different authentication provider that you set up in Canvas gets its own URL assigned  So, set up both SAML and CAS providers, and make note of the URLs.  They will be something like https://<canvas server>/login/saml/2 , etc.

Then, create an HTML page on an external server that includes links to each of the different Canvas authentication provider URLs.  Instead of using the order of the authentication providers in the Canvas list, you can put the URL of the "login page" under SSO Settings > Discovery URL, and instead of being automatically directed to the first authentication provider in the list, when they connect to the main Canvas URL, they will be directed to the "discovery"/Canvas login section page that you have set up.

Mike

View solution in original post

ewest
Community Contributor

Thanks Michael! That's very helpful.