cancel
Showing results for 
Search instead for 
Did you mean: 
jbreen1
Community Member

Mobile Application: SSO and multiple AuthN mechanisms

Jump to solution

We have a canvas catalog instance and we are currently supporting multiple ways for a user to authenticate to the service: local canvas login, and through an OIDC federation. We have run in to a problem where mobile users will experience issues since the mobile application can not dynamically let a user choose which method they want to use. So, my question is can canvas support any of the following:

1) Let us register our instance multiple times so it is searchable in the school selection drop-down? It would look like this in the drop-down:

University of Pennsylvania Online Learning -> this would take the user to local canvas login.

University of Pennsylvania MEHP -> this would take the user to the OIDC identity provider.

2) Another alternative would be to just make one drop down selection for one authentication type and allow other users to type in the domain name to go to the other authentication type (e.g. type the full domain in the text field of the mobile application).

Our desire is to be able to support OIDC federated login AND canvas local login through the mobile application for this Canvas instance. I understand there is a double finger double tap "trick" to get the "Canvas Login" to appear in the application, but we really don't think end-users are going to be able to do that. Furthermore, that would not solve the problem if we ever had to introduce a 3rd authentication mechanism.

Thanks,

John

1 Solution

Accepted Solutions
jbreen1
Community Member

All,

Following up on this... we worked with Canvas to come to an acceptable solution for this problem. Essentially, option #1 was chosen and is currently in use. We have not had any complaints about this or notification of confusion on behalf of the users on how to use this. Our testing showed that this worked as desired, we did produce targeted communications on this so we think that was a key to this being successfully used. 

Thanks,

John

View solution in original post

3 Replies
rseilham
Community Coach
Community Coach

Hi  @jbreen1 ‌,

I am not an expert with authentication, but I have seen schools have the login screen in the app going to different places based on the user's selection. For example, after finding their school in the app, they are brought to a custom login screen which will ask the users questions like, "Are you faculty or student?", which would send them to different logins. It is possible that you could have two different schools in the search, but I would suggest you discuss this with your CSM or Canvas Support, as this can't be done at the school level. 

Essentially, I think there is a solution, but you might have to bring this up directly with Canvas to find it. Let us know if you find an answer as I'm sure others are curious. Thanks. 

jbreen1
Community Member

All,

Following up on this... we worked with Canvas to come to an acceptable solution for this problem. Essentially, option #1 was chosen and is currently in use. We have not had any complaints about this or notification of confusion on behalf of the users on how to use this. Our testing showed that this worked as desired, we did produce targeted communications on this so we think that was a key to this being successfully used. 

Thanks,

John

View solution in original post

That's wonderful news,  @jbreen1 ‌! I'm glad you found an acceptable solution and that it's not causing any confusion.