SSO with OpenID Authentication Issue

[sergio-toledo]

I'm trying to authenticate via OpenID Connect and all the Oauth flow is working, but when the URL /users/login is called I'm getting the message: Canvas doesn't have an account for user: my_id.

The /oath/userinfo is returning: { "sub": "my_id" }.

In the Authentication Settings/OpenID Connect page the Login Attribute is sub.

And my Canvas user has the attribute SIS ID as my_id.

What do I need to set in order SSO works properly.

[sergio-toledo · Accepted solution]

Hi everyone!

Just to inform you that I've found the solution.

The issue was that the login created didn't have the appropriate authentication_provider_type.

The solution was to create another login for my user with the correct "authentication_provider_type": "openid_connect" and "authentication_provider_id":  "<MY_ID>".

Regards.

[jerfmx23]

Hi Sergio,

Im facing the same issue with my open-id service. When receiving response from canvas I find the same error message: "Canvas doesn't have an account for user: my_id."

Could you please give us some more explanation about how you solved the issue? Because we cannot find where or how to apply the solution you provided.

Here I send you my email so we can communicate via email if you want 🙂

sebastian.moran@upaep.mx

Thank you so much! We could really use your help.

[chriscas]

Hi @jerfmx23,

Using the logins api would be one way to handle what @sergio-toledo was talking about.  You could potentially also do this through a SIS csv upload, but that depends on whether all of your users have an sis_id or not.  The API will work for any user as long as you know the canvas user_id.

Hope this helps a bit!

-Chris