SSO Authentication in Mobile App

[Beehive]

We just deployed SSO for Canvas via Azure/Entra. It's working great; however, we do have one sticky problem. Users cannot authenticate through the Canvas app because it does note redirect them to our SSO gateway. What are we missing?

[mzimmerman]

Hi @Beehive 

Do you have the SSO set as the first/default authentication provider for Canvas?  The Canvas app uses the default provider, and (as least as far as I can tell) there isn't an option to direct app users to any of the other providers if you have multiple providers configured.

[Beehive]

Thank you for your reply. Our SAML SSO is set at position 1, Canvas at position 2 in our authentication settings. That should be enough, right?

[chriscas]

Hi @Beehive,

I would think that is the correct config.  That's what we have (with SAML/Shibboleth at position 1, and Canvas at 2), and when our users login with the mobile app, they are presented with our Shibboleth SSO screen.  When using the mobile app, do you know how your users are finding your specific school, as in do they enter the school name, or your Canvas domain?  Either option should work, but I wonder if one way or the other would yield a different result somehow.

-Chris

[Beehive · Accepted solution]

Yes, they're finding our school, but good news! Figured it out. Our CSM had to update our domain lookup to eliminate the /login/canvas in our URL. Very weird that this wasn't an issue for our desktops, just on the app. Thank you, both, for sharing your ideas! Hopefully this thread will help someone else down the road.