You can configure user sign in options for users in your account from Sign-in Settings. Elevate K-12 Analytics offers several account authentication methods.
Personal Logins
Users log in with a personal username and password.
First-time users must enter their institution-provided username and then enter a password to use with their account. They must then check their institution-provided email account for an account verification email. Once verified, users can log in to Elevate K-12 Analytics.
Social Logins
You can allow users to log in using their Gmail account.
Multi-Factor Authentication
You can require users to log in using multi-factor authentication. Before logging into Elevate K-12 Analytics, users must obtain a verification code sent via email. Users can select for Elevate K-12 Analytics to remember their login on the current device.
Single Sign-On
When enabled, users at your institution can access Elevate K-12 Analytics from a preconfigured link on an intranet website. This method bypasses the login screen. To configure SSO for your account, you need the following information from your identity provider:
- Client ID
- Client Secret
Open Administration Page
In the Navigation Menu, click the Admin link.
Open Security
In the Elevate K-12 Analytics Administration page, click the Security link.
Open Sign-in Settings
In the Security Management Navigation Menu, click the Sign-in Settings link [1], or on the Security Management Overview page you can click the Sign-in Settings link [2].
View Sign-in Settings
Manage general sign-in settings for your account on the Sign-in Settings page.
Enable Personal Logins
To enable personal logins for manually created users in your account, click the Personal logins enabled toggle [1]. This option allows users to create their own password upon login. It also allows users to log in with approved social media accounts.
To specify the social media platforms available for login, click the Social logins checkbox next to the platform name [2]. Currently Elevate K-12 Analytics offers support for login via Google.
Note: First-time users must enter their institution-provided username and then enter a password to use with their account. They must then check their institution-provided email account for an account verification email. Once verified, users can log in to Elevate K-12 Analytics.
Enable SSO
To enable single sign-on for your account, click the SSO enabled toggle. This option requires users to log in using your institution's identity authorization provider. You can also specify account SSO options for individual users whose accounts were created manually.
Configure SSO with Discovery Document
To enable single sign-on for your account, you must configure your institution's SSO for Elevate K-12 Analytics.
Your institution's Elevate K-12 Analytics URL displays in the Redirect URL field [1]. To copy this URL, click the Copy link [2]. Then add the URL to your Identity Provider allow list.
Enter the client ID in the Client ID field [3] and the client secret in the Client secret field [4]. If you do not know this information, you can obtain it from your identity provider.
Specify the identity provider's level of access in the Scopes field [5].
Enter the OpenID Connect Provider URL in the Issuer URL field [6].
To enable SSO configuration using a discovery document, click the User discovery document toggle [7].
To specify a logout URL for your account, click the Logout URL [8].
Configure SSO without Discovery Document
If you turn off the Use discovery document option [1], you must provide the following information.
Authorization URL [2]: the redirect URL where users can complete authentication.
Token URL [3]: the token endpoint used to obtain an access token, ID token, and refresh token.
Jwks URL [4]: the token endpoint used to obtain an access token, ID token, and refresh token.
Require Multi-Factor Authentication
You may require multi-factor authentication (MFA) for personal login users. This requires them to enable MFA on their user accounts.
To require MFA, click the MFA required toggle [1]. To set a date for the requirement to begin, enter or select a date in the MFA requirement effective date field [2].
Note: Even if MFA is not required, individual users with personal logins may set it up for their account.
Save Settings
Click the Save changes button.
