LearnPlatform integrates with any Identity Provider that implements Single Sign-On (SSO) with SAML 2.0. This guide outlines how to set up SSO with Azure.
Prerequisites for setup:
- Organization Administrator access to your organization’s LearnPlatform account
- Azure Administrator access through your organization
- Your organization’s LearnPlatform subdomain: This must be listed in your setting configurations in LearnPlatform
Note: Once enabled, our system does not notify your staff that they have access to LearnPlatform.
Open Single Sign-On Page
Sign in to your LearnPlatform administrator account. In the Settings tab [1], click the Single Sign-On tile [2].
Enable Single Sign-On
Click the Single Single-On Type drop down menu [1], and select the SAML 2.0 option [2].
Copy Callback URLs
Click the Use organization domain for callback urls toggle on [2]. Copy the following URLs:
- AssertionConsumerService (ACS) URL/callback url [2]: Your ACS URL in your Service Provider Details for the LearnPlatform app is https://[YourSubDomain].app.learnplatform.com/users/auth/saml/callback/
- Entity ID/Metadata URL [3]: Your Entity ID/Metadata url in your Service Provider Details for the LearnPlatform app is https://[YourSubDomain].app.learnplatform.com/users/auth/saml/metadata/
Setup Initial Azure Configuration
In a separate window or tab, sign in to your Azure portal.
In the Search field, enter Enterprise applications [1], and then select it when it appears in the search results [2].
Add New Application
In the All applications page, click the Add New application link.
Create Own Application
In the Browse Microsoft Entra Gallery page, click the Create your own application link.
In the Create your own application window, complete the following:
- Enter the name you want to appear in Azure’s MyApps (e.g. LearnPlatform)
- Click the Integrate any other application you don't find in the gallery (Non-gallery) radio button.
- Click the Create button.
Add Icon
Download the default app icon to use as the icon for your custom SAML app.
From the App Navigation, click the Properties link [1]. Then click the Select a file icon [2]. Locate the app icon from your files and click the Upload or Open button.
To save the changes, click the Save icon [3].
Set Up Single Sign-On
In the Overview page [1], click the Set up single sign on tile [2].
Edit Basic SAML Configuration
In the Set up Single Sign-On with SAML page, locate the Basic SAML Configuration section and then click the Edit icon.
Add Callback URLs
In the Basic SAML Configuration window, locate the Identifier (Entity ID) field and then enter the Entity ID/Metadata URL [1].
In the Reply URL (Assertion Consumer Service URL) field, enter the AssertionConsumerService (ACS) URL/callback url [2]. Then click the Save icon [3].
Finish LearnPlatform Account Configuration
Go back to the SAML-based Sign-on page in the Azure portal. In the Attributes & Claims section, click the Edit icon.
Add Attributes
In the Azure portal's Attributes & Claims page, copy the following details and paste it to the relevant fields in the LearnPlatform's SAML setup page:
| Details to copy from the Attributes & Claims page in Azure portal | LearnPlatforms SAML setup fields where to paste the Attributes & Claims details |
|---|---|
|
Either the name/user principal name link (if your email address is the same as your Azure login id), or email address link (if your Azure login id is different from your email address) [1] Note: This email address must match the email address of the user in LearnPlatform. |
Email Attribute field [2] |
given name link [3] |
First Name Attribute field [4] |
surname link [5] |
Last Name Attribute field [6] |
Add Certificate
Go back to the SAML-based Sign-on page in the Azure portal. In the SAML Signing Certificate section, locate the Certificate (Base64) row and then click the Download link [1].
Open the downloaded file in a text editor and copy all the text in the file using this format:
-----BEGIN CERTIFICATE-----
[Full certificate value from ADFS Management Console]
-----END CERTIFICATE-----
In the LearnPlatform Single Sign-On setup page, paste the certificate text in the Certificate field [2].
Note: Make sure not to include any spaces or change the formatting of the certificate. You must download the certificate into a text editor like NotePad or TextHelp. If you use another program, it may pull characters such as HTML into the certificate, which means it will not paste correctly.
Add Identity Provider Redirect and Logout URL
In the Azure portal's Set Up [App Name] page, copy the following details and paste it to the relevant fields in the LearnPlatform's SAML setup page:
| Details to copy from the Set Up [App Name] page in Azure portal | LearnPlatforms SAML setup fields where to paste the Attributes & Claims details |
|---|---|
Login URL code [1] |
Identity Provider Redirect URL field [2] |
Logout URL code [3] |
Identity Provider Logout URL field [4] |
Review and Apply LearnPlatform Configuration
Check that all details are correct. Then click the Apply button.
Assign Azure Application to Users
In the Azure portal, complete the following:
- From the App Navigation, click the Users and Groups link.
- Click the Add user/group icon.
- Select the users and groups you want to have access to LearnPlatform from Azure’s MyApps portal.
- Click the Assign button.
Test Single Sign-on
Log into https://myapps.microsoft.com/ with a user assigned to the LearnPlatform application.
Ensure that a LearnPlatform tile is present and that when a user clicks the tile it takes them to LearnPlatform.
Troubleshooting
If you have questions or need additional support, please email support-lp@instructure.com.
