The components necessary for Seamless Learning Access are provided automatically. Some configuration is required.
- Jamf Pro and Jamf School
- The mobile device management (MDM) solutions that manages the iPad devices, deploys the Seamless Learning Access blueprint and mobile app, and synchronizes user accounts from Apple School Manager.
- RapidIdentity
An Identity and Access Management (IAM) system that provides identity lifecycle management, access management, multi-factor authentication, and single sign-on services.
In Seamless Learning Access, RapidIdentity serves as a silent identity provider (IdP) for the iPad devices. It leverages trust with Jamf Pro to create and manage the SSO session context that provides the Seamless Learning experience for iPad users.
- Seamless Learning Access blueprint
- The Jamf Pro blueprint that configures the iPad with the single sign-on extension profile and the binding token used to establish the SSO session context with RapidIdentity.
- Single sign-on (SSO) extension
- The iPad extension that detects authentication requests to RapidIdentity, exchanges the binding token for a refresh token, and uses the refresh token to obtain a Secure Authentication Token (SAT) cookie. This allows the user to access education applications without encountering a login screen.