Prerequisites include:
- Organization Administrator access to your organization’s LearnPlatform account
- GSuite Domain Administrator access through your organization
- Your organization’s subdomain must be listed in LearnPlatform's setting configurations
Note: Once enabled, our system does not notify your staff that they have access to LearnPlatform.
Configure LearnPlatform Account
Sign in to your LearnPlatform administrator account. Click the Settings link [1] and then click the Single Sign-On tile [2].
From the Single Sign On Type drop-down menu [1], click the SAML 2.0 link [2].
In the Single-Sign-On page, click the Use organization domain for callback urls toggle on.
Configure GSuite
In a separate window or tab, sign in to your G-Suite administrator dashboard (typically at admin.google.com). Then click the Apps tile.
Open Apps
In the Apps page, click the Web and mobile apps tile.
Add App
In the Add App drop-down menu [1], click the Add Custom SAML app link [2].
Add App Details
In the App details window, enter LearnPlatform as the App name [1].
Download the following image to use as the icon for your custom SAML app. Then upload the image as the App Icon [2].
To save the details, click the Continue button [3].
Configure SSO
Copy the SSO URL, Entity ID, and Certificate details [1], and then paste it into the associated field in LearnPlatform's SSO setup page.
- SSO URL: Identity Provider Redirect URL in LearnPlatform
- Entity ID: Identity Provider Logout URL in LearnPlatform
- Certificate: certificate
Click the Continue button [2].
Note: In the Certificate field, take special care to not include extra spaces or change the formatting of the certificate. It is recommended to use Notepad to remove formatting.
Add Service Provider Details
In the Google Admin Console, fill in the ACS URL and Entity ID fields. These are found on LearnPlatform's SAML setup page.
- ACS URL = the first callback URL ending in “/callback/” in LearnPlatform
- Entity ID = the second callback url ending in “/metadata/” in LearnPlatform
Make sure you capture the backward slash (/) at the end of each of these Entity ID and ACS URL and avoid any spaces. If the URLs are not identical, your setup may not work properly.
Add Mappings
Click the Add Mapping button.
Add Attributes
To add mappings in the Google Admin Console, enter the following attribute mapping fields (no spaces and appropriate capitalization):
- Select the Primary email Google Directory attribute on the left. Enter email as its App Attribute [1].
- Then select the First name Google Directory attribute on the left. Enter FirstName as its App Attribute [2].
- Finally, select the Last name Google Directory attribute on the left. Enter LastName as its App Attribute [3].
Once you completed the mapping, click the Finish button [4].
Set User Access
To change the User Access setting, click the OFF for everyone link.
Turn On User Access
Select the ON for everyone radio button [1]. Then click the Save button [2].
Add Attribute Mapping Fields in Learn Platform
Go back to LearnPlatform’s SAML setup page and enter the same attribute mapping fields as you added in your Google Admin Console. Remember to match both case and exact formatting. Once you complete all fields, click the Apply button.
View and Apply LearnPlatform SSO
View your final LearnPlatform SSO set up page. Then click the Apply button.
Notes:
- Bookmark your LearnPlatform Login: [YourSubDomain].app.learnplatform.com/users/sign_in/.
- Your subdomain is located on LearnPlatform > Settings > Display Appearance Tile.
- The settings may take up to 24 hours to apply to all users.
Troubleshooting
If you have questions or need additional support, please take a look at Troubleshooting my Google Single Sign On (SSO) for SAML or email support-lp@instructure.com.
