cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

How do I configure sign-in authentication options for Elevate K-12 Analytics?

How do I configure sign-in authentication options for Elevate K-12 Analytics?

You can configure user sign in options for users in your account from Sign-in Settings. Elevate K-12 Analytics offers several account authentication methods.

Personal Logins

Users log in with a personal username and password.

First-time users must enter their institution-provided username and then enter a password to use with their account. They must then check their institution-provided email account for an account verification email. Once verified, users can log in to Elevate K-12 Analytics.

Social Logins

You can allow users to log in using their Gmail account.

Multi-Factor Authentication

You can require users to log in using multi-factor authentication. Before logging into Elevate K-12 Analytics, users must obtain a verification code sent via email. Users can select for Elevate K-12 Analytics to remember their login on the current device.

Single Sign-On

When enabled, users at your institution can access Elevate K-12 Analytics from a preconfigured link on an intranet website. This method bypasses the  login screen. To configure SSO for your account, you need the following information from your identity provider:

  • Client ID
  • Client Secret

Open Administration Page

Open Administration Page

In the Navigation Menu, click the Admin link.

Open Security

In the Elevate K-12 Analytics Administration page, click the Security link.  

Open Sign-in Settings

In the Security Management Navigation Menu, click the Sign-in Settings link [1], or on the Security Management Overview page you can click the Sign-in Settings link [2].

View Sign-in Settings

View Sign-in Settings

Manage general sign-in settings for your account on the Sign-in Settings page.

Enable Personal Logins

To enable personal logins for manually created users in your account, click the Personal logins enabled toggle [1]. This option allows users to create their own password upon login. It also allows users to log in with approved social media accounts.

To specify the social media platforms available for login, click the Social logins checkbox next to the platform name [2]. Currently Elevate K-12 Analytics offers support for login via Google.

Note: First-time users must enter their institution-provided username and then enter a password to use with their account. They must then check their institution-provided email account for an account verification email. Once verified, users can log in to Elevate K-12 Analytics.

Enable SSO

To enable single sign-on for your account, click the SSO enabled toggle. This option requires users to log in using your institution's identity authorization provider. You can also specify account SSO options for individual users whose accounts were created manually.

Configure SSO with Discovery Document

To enable single sign-on for your account, you must configure your institution's SSO for Elevate K-12 Analytics.

Your institution's Elevate K-12 Analytics URL displays in the Redirect URL field [1]. To copy this URL, click the Copy link [2]. Then add the URL to your Identity Provider allow list.

Enter the client ID in the Client ID field [3] and the client secret in the Client secret field [4]. If you do not know this information, you can obtain it from your identity provider.

Specify the identity provider's level of access in the Scopes field [5].

Enter the OpenID Connect Provider URL in the Issuer URL field [6].

To enable SSO configuration using a discovery document, click the User discovery document toggle [7].

To specify a logout URL for your account, click the Logout URL [8].

Configure SSO without Discovery Document

If you turn off the Use discovery document option [1], you must provide the following information.

Authorization URL [2]: the redirect URL where users can complete authentication.

Token URL [3]: the token endpoint used to obtain an access token, ID token, and refresh token.

Jwks URL [4]: the token endpoint used to obtain an access token, ID token, and refresh token.

Require Multi-Factor Authentication

You may require multi-factor authentication (MFA) for personal login users. This requires them to enable MFA on their user accounts.  

To require MFA, click the MFA required toggle [1]. To set a date for the requirement to begin, enter or select a date in the MFA requirement effective date field [2].

Note: Even if MFA is not required, individual users with personal logins may set it up for their account.

Save Settings

Click the Save changes button.

Was this article helpful? Yes No
Have a question about Elevate K-12 Analytics? Ask in the Q&A forum: