How do I configure Single Sign-On (SSO) with ClassLink?

[#1]

LearnPlatform integrates with any Identity Provider that implements Single Sign-On (SSO) with SAML 2.0. This guide outlines how to set up SSO for Classlink. For the general documentation on this process, refer to the SAML Console article in ClassLink.

Prerequisites for setup:

• Organization Administrator access to your organization’s LearnPlatform account
• ClassLink Domain Administrator access through your organization
• Your organization’s LearnPlatform subdomain: This must be listed in your setting configurations in LearnPlatform

Note: Once enabled, our system does not notify your staff that they have access to LearnPlatform.

Open Single Sign-On page

Sign in to your LearnPlatform administrator account. In the Settings tab [1], click the Single Sign-On tile [2].

Enable Single Sign-On

Click the Single Single-On Type drop down menu [1], and select the SAML 2.0 option [2].

Copy Callback URLs

Click the Use organization domain for callback urls toggle on [2], and then copy the following URLs:

• AssertionConsumerService (ACS) URL/callback url [2]: Your ACS URL in your Service Provider Details for the LearnPlatform app is https://[YourSubDomain].app.learnplatform.com/users/auth/saml/callback/
• Entity ID/Metadata URL [3]: Your Entity ID/Metadata url in your Service Provider Details for the LearnPlatform app is https://[YourSubDomain].app.learnplatform.com/users/auth/saml/metadata/

Configure ClassLink

In the ClassLink Management Console, click the Single Sign-On drop-down menu and then click the SAML Console link.

In the ClassLink SAML Console page, click the Add New icon. To view the XML and copy necessary information to configure your LearnPlatform account, open the IDP Metadata URL menu.

Copy Identity Provider Redirect URL

Locate and copy the SingleSignOnService URL.

Copy Identity Provider Logout URL

Locate and copy the SingleLogOutService URL.

Copy Certificate

Locate and copy the X509Certificate.

Configure LearnPlatform Account

In the Learn Platfrom Single Sign-On page, enter the details you previously copied from ClassLink:

1. Identity Provider Redirect URL
2. Identity Provider Logout URL
3. Certificate: Enter the Begin and End certificate information as displayed below.

-----BEGIN CERTIFICATE-----

[Full certificate value from XML/Metadata]

-----END CERTIFICATE-----

Note: Make sure to not include any extra line breaks or spaces as this will cause an error.

Finish ClassLink Configuration

Go back to ClassLink and add the following:

1. Name: LearnPlatform
2. Metadata URL: Add the generated metadata URL from your LearnPlatform SSO dashboard.
3. Login URL: This URL extension may be any custom stem of your choosing.
4. Icon URL: You may use the default icon for the icon URL.
5. Attribute Mapping: From the mapping dash, select and align these three attributes between LearnPlatform and Classlink.
   • First Name
   • Last Name
   • Email Address

To save and confirm your settings, click the Update button.

Verify that the selected attributes are the same between LearnPlatform's dashboard and Classlink's dashboard. (e.g., first_name; last_name, etc.)

Build the SSO app in Classlink. Navigate to Add & Assign Apps and then click the New icon. Enter the name of the SAML app and complete the remaining fields. Remember to do the following:

1. Click the Single Sign-On toggle on.
2. Select SAML as the Type.
3. Enter your district's login URL.

Your login URL will be http://[YourDomain].app.learnplatform.com (e.g., http://springfield.app.learnplatform.com)