Activity Feed
- Kudoed Re: Help with Integrating Populi and Canvas for EvanDonovan. 11-01-2021 10:30 AM
- Kudoed Re: Help with Integrating Populi and Canvas for EvanDonovan. 11-01-2021 10:30 AM
- Kudoed Re: Help with Integrating Populi and Canvas for EvanDonovan. 11-01-2021 10:30 AM
- Got a Kudo for Re: Allowing Students to change Canvas Passwords and Two Factor Authentication. 10-27-2021 06:25 AM
- Got a Kudo for Re: SSO between Canvas and Azure doesn't work if user is signed into Canvas first. 10-27-2021 06:24 AM
- Kudoed Mass Announcements with Embedded Images for bpoullio1. 10-27-2021 06:20 AM
- Kudoed Re: Mass Announcements with Embedded Images for bpoullio1. 10-27-2021 06:20 AM
- Posted Re: Allowing Students to change Canvas Passwords and Two Factor Authentication on Canvas Admin Discussion. 10-27-2021 06:17 AM
- Posted Re: SSO between Canvas and Azure doesn't work if user is signed into Canvas first on Canvas Admin Discussion. 10-27-2021 06:12 AM
- Posted Re: Using Microsoft Azure to Authenticate Users on Canvas Admin Discussion. 10-27-2021 06:05 AM
- Posted Re: Help with Integrating Populi and Canvas on Canvas Admin Discussion. 10-27-2021 05:57 AM
My Posts
Post Details | Date Published | Views | Kudos |
---|
10-27-2021
06:17 AM
1 Kudo
FWIW, I don't know anything about the LDAP integration, but we use AzureAD for authentication, and rely on the security settings specified there to enforce things like MFA and password complexity for the organization.
As such, there are no Canvas passwords to be reset or synchronized as that is all handled via SSO.
... View more
10-27-2021
06:12 AM
1 Kudo
When you say "If the user is signed into Canvas first", do you mean that the user logs in at /login/canvas?
If so, that flow won't work. That authenticates the user with the canvas username/password, but Microsoft won't accept that authentication.
They would need to log in at /login/saml (or something similar to that, depending on your setup), which technically redirects the authentication request to AzureAD before granting access to Canvas. Once the user logs in at the saml address, they are authenticated to Microsoft and should be able to navigate to Azure without issue.
To ensure that the user is authenticating to AzureAD when starting at Canvas, I think you need to make sure provider #1 is the saml provider, with the canvas login below it.
... View more
10-27-2021
06:05 AM
We have been using AzureAD for a few months with no reliability issues.
We just recently added a SharePoint redirect as the Discovery page because Canvas isn't very particular about which Microsoft account the user might be attempting to use, and if it was the wrong account it was confusing.
Meaning, if I am signing into Microsoft with my personal MS account, Canvas would attempt to authenticate me using that account, couldn't find me, and would send me to the /login/canvas page. As an SSO user, I don't have a "Canvas" username/password and would be stuck.
By using a discovery page in SharePoint, when I go to Canvas it would send me first to SharePoint. If logged in to the correct MS account, I would redirect back to Canvas seamlessly. If not logged into the correct account, SharePoint will tell me which account I am using and give me a link to change to the correct account before returning.
... View more
10-27-2021
05:57 AM
We are just starting to use Populi and I am unsuccessfully trying to figure out the integration.
Populi has this help article, Canvas Integration – Populi Knowledge Base (populiweb.com), but the integration setup doesn't match what I see in Canvas, and my guesses didn't work.
I think I want to go to https://[mydomain].instructure.com/accounts/1/developer_keys and add an API developer key for Populi, but I left most of the fields blank as I was unsure what the correct value might be.
I then tried to use the resulting key in Populi, but the Test button tells me that " An error occured accessing the Canvas LMS API. Invalid access token. "
... View more