Community

FWIW, I don't know anything about the LDAP integration, but we use AzureAD for authentication, and rely on the security settings specified there to enforce things like MFA and password complexity for the organization. As such, there are no Canvas passwords to be reset or synchronized as that is all handled via SSO. ... View more

When you say "If the user is signed into Canvas first", do you mean that the user logs in at /login/canvas? If so, that flow won't work. That authenticates the user with the canvas username/password, but Microsoft won't accept that authentication. They would need to log in at /login/saml (or something similar to that, depending on your setup), which technically redirects the authentication request to AzureAD before granting access to Canvas. Once the user logs in at the saml address, they are authenticated to Microsoft and should be able to navigate to Azure without issue. To ensure that the user is authenticating to AzureAD when starting at Canvas, I think you need to make sure provider #1 is the saml provider, with the canvas login below it. ... View more

We have been using AzureAD for a few months with no reliability issues. We just recently added a SharePoint redirect as the Discovery page because Canvas isn't very particular about which Microsoft account the user might be attempting to use, and if it was the wrong account it was confusing. Meaning, if I am signing into Microsoft with my personal MS account, Canvas would attempt to authenticate me using that account, couldn't find me, and would send me to the /login/canvas page. As an SSO user, I don't have a "Canvas" username/password and would be stuck. By using a discovery page in SharePoint, when I go to Canvas it would send me first to SharePoint. If logged in to the correct MS account, I would redirect back to Canvas seamlessly. If not logged into the correct account, SharePoint will tell me which account I am using and give me a link to change to the correct account before returning. ... View more

We are just starting to use Populi and I am unsuccessfully trying to figure out the integration. Populi has this help article, Canvas Integration – Populi Knowledge Base (populiweb.com), but the integration setup doesn't match what I see in Canvas, and my guesses didn't work. I think I want to go to https://[mydomain].instructure.com/accounts/1/developer_keys and add an API developer key for Populi, but I left most of the fields blank as I was unsure what the correct value might be. I then tried to use the resulting key in Populi, but the Test button tells me that " An error occured accessing the Canvas LMS API. Invalid access token. " ... View more