Configuring Single Sign-On (SSO) for Classlink

[#1]

For general Classlink documentation on this process, please navigate to this link.

Note: Once enabled, our system does not notify your staff that they have access to LearnPlatform.

Prerequisites include:

• Organization Administrator access to your organization’s LearnPlatform account
• GSuite Domain Administrator access through your organization
• Your organization’s subdomain must be listed in LearnPlatform's setting configurations

Configuring LearnPlatform Account

Note: Once enabled, our system does not notify your staff that they have access to LearnPlatform.

1. Sign in to your LearnPlatform administrator account, click on:
   Settings > Single Sign On > Single Sign On Type > SAML 2.0 
2. Toggle “ON” the Use organization domain for callback urls at the bottom of your Single-Sign-On page.

Configuring Classlink

1. In the ClassLink Management Console, click Single Sign-On and select SAML Console.
2. Click ADD NEW.
3. Open the IDP Metadata URL so that you are able to see the XML.

1. You will pull a number of pieces of data from the IDP URL to input back into LearnPlatform:

1. Identity Provider Redirect URL: Copy the SingleSignOnService URL into this field.

1. Identity Provider Logout URL: Copy the SingleLogOutService URL into this field.

1. Certificate: To get the certificate, please enter in the BEGIN and END certificate information as displayed below.
   1. -----BEGIN CERTIFICATE-----
      1. Copy the full certificate value from XML/Metadata.

• Be careful to not include any extra line breaks or spaces, as this will cause an error.
  1. -----END CERTIFICATE-----

1. Back in Classlink, add the following:
   1. NAME: LearnPlatform
   2. METADATA URL: Add the generated metadata URL from your LearnPlatform SSO dashboard.

1. LOGIN URL: This URL extension may be any custom stem of your choosing.
2. ICON URL: You may use the following for the icon URL.
3. ATTRIBUTE MAPPING: From the mapping dash, select and align these three attributes between LearnPlatform and Classlink:
   1. First Name
   2. Last Name
   3. Email Address
4. Select Update to save and confirm.

Verify that the selected attributes are the same between LearnPlatform's dashboard and Classlink's dashboard. (e.g., first_name; last_name, etc.)

1. Build the SSO app in Classlink. Navigate to Add & Assign Apps and click New. Input the name of the SAML app and complete the remaining fields. Remember to toggle on Single Sign-On, select SAML as the type, then type your district's login URL.
   1. Your login URL will be http://YOURDOMAIN.app.learnplatform.com (e.g., http://springfield.app.learnplatform.com)