Configuring Single-Sign-On with Azure

Note: Once enabled, our system does not notify your staff that they have access to LearnPlatform.

Prerequisites include:

  • Organization Administrator access to your organization’s LearnPlatform account
  • Azure Administrator access through your organization
  • Your organization’s subdomain must be listed in LearnPlatform's setting configurations

Configuring LearnPlatform Account

  1. Sign in to your LearnPlatform administrator account, click on:
    Settings > Single Sign On > Single Sign On Type > SAML 2.0 
  1. Toggle “ON” the Use organization domain for callback urls at the bottom of your Single-Sign-On page.

Initial Azure Configuration

In a separate window or tab, sign in to your Azure portal.

Search for Enterprise Applications > Select Enterprise Applications > Click New Application > Click Create your own application

From the pop-up box on the right titled “Create your own application”

  1. Fill in the name you want to appear in Azure’s MyApps (e.g. “LearnPlatform”)
  2. Ensure that the option “Integrate any other application you don't find in the gallery (Non-gallery)” is selected 
  3. Click Create

From the App Overview page, select Properties from the left menu.

  1. Download the following image to use as the icon for your custom SAML app. Upload this image as the App Icon.
  2. Select file to upload.
  3. Click Save

Navigate back to the Overview screen, click Setup Single Sign On > Get Started, click SAML, click the Edit button for the Basic SAML Configuration section.

While in the the Basic SAML Configuration pop up screen:

  1. Copy the metadata url from the Single Sign-On setup screen in the LearnPlatform tab (bottom of the SSO setup screen)
  1. Paste this URL into the “Identifier (Enitity ID)” text box in Azure Portal’s Basic SAML Configuration.
  1. On LearnPlatform’s SAML setup page (bottom of the page), copy the first callback url ending in ending in “/callback/”
  1. Paste this URL into the Azure Portal’s “Reply URL” text box
  1. Click Save
Finish Configuring LearnPlatform Account
  1. Navigate back to Set up Single Sign-On with SAML in the Azure portal and click Edit on the Attributes & Claims section.
  2. From Attribute and Claims page, select the Claim name for either “name/user principal name” (if your email address is the same as your Azure login id) or “email” (if your Azure login id is different from your email address).  This email address must match the email address of the user in LearnPlatform.
  1. Paste this value into the “Email Attribute” text box on the LearnPlatform Single Sign-On setup screen 
  1. Select the Claim name for “Given Name” from Azure’s Attribute and Claims page 
  1. Paste this value into “First Name Attribute” text box on the LearnPlatform Single Sign-On setup screen
  1. Select the Claim name for “Surname” from Azure’s Attribute and Claims page
  1. Paste this value into “Last Name Attribute” text box on the LearnPlatform Single Sign-On setup screen
  1. Navigate back to Set up Single Sign-On with SAML in the Azure portal and scroll to the SAML Signing Certificate section and click the “Download” link for Certificate (Base64).

_insert_gif_

  1. Open this downloaded file in a text editor and copy all the text in the file.
  2. Paste this certificate text into the “Certificate” text box on the LearnPlatform Single Sign-On setup screen.  The text should appear similar to the text below:
  1. Navigate back to Set up Single Sign-On with SAML in the Azure portal and scroll to the Set up LearnPlatform section.  
  2. Click the “Copy to clipboard” button for Login URL
  1. Paste the Login URL into the “Identity Provider Redirect URL” text box on the LearnPlatform Single Sign-On setup screen. 
  1. Click the “Copy to clipboard” button for Logout URL
  1. Paste the Login URL into the “Identity Provider Redirect URL” text box on the LearnPlatform Single Sign-On setup screen. 
  1. Click “Apply”
  2. The LearnPlatform Single Sign-On configuration should look similar to below:
Assign Azure Application to Users
  1. While still in the LearnPlatform Application details in the Azure portal
  2. Select “Users and Groups”
    1. Add User/Group
    2. Select the users and groups you want to have access to LearnPlatform from Azure’s MyApps portal.
    3. Click “Assign”

_insert_gif_

Test Single Sign-on
  1. Log into https://myapps.microsoft.com/ with a user assigned to the LearnPlatform application
  2. Ensure that a LearnPlatform tile is present.
  3. Clicking on the tile should log the user into LearnPlatform

You are all set!

Troubleshooting

If you have questions or need additional support, please email support-lp@instructure.com.