Configuring SAML-Based SSO with Canvas

RapidIdentity Platform Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Canvas supports a SAML-based single sign-on (SSO) service for its web-based application that you can configure in your RapidIdentity portal. These configuration settings are an example and may vary for individual configurations.

Requirements
  • Canvas administrator credentials
  • Access to your RapidIdentity administrator portal
  1. In Canvas, navigate to Admin > Account Selection and select Authentication from the navigation menu.
  2. Configure the following SAML settings:
    SettingValue
    IdP Entity IDRapidIdentity Entity ID
    Log On URLRapidIdentity Base URL
    Log Out URLRapidIdentity Logout URL
    Certificate FingerprintRapidIdentity Certificate Fingerprint
    Login AttributeNameID
    Strip Domain From Login Attribute Valuetrue
    Identifier Formaturn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
    Authentication ContextNo Value
    Message SigningRSA-SHA256
  3. Record the Canvas SAML Entity ID URL and Direct Login URL for your RapidIdentity configuration.
  4. Navigate to your RapidIdentity administrator portal.
  5. From the module selector, choose Configuration.
  6. Select Security > Identity Providers > Federation Partners.
  7. Click Add Federation Partner > SAML 2.0, then click Create SAML Relying Party.
  8. In the General section, set the following:
    1. Name: Canvas SAML SSO
    2. Description: SAML configuration for Canvas LMS
    3. Metadata: Paste the Canvas metadata.
  9. In the Attribute Mapping section, click Add New Attribute + and set the following options:
    1. Select New Attribute Type: Name ID
    2. LDAP Attribute: mail
    3. Name Format Friendly Name: Email Address
  10. Click Create, then click Save.
  11. Click Trigger Service Reload.

RapidIdentity and Canvas are now integrated, allowing users to authenticate to Canvas with their RapidIdentity credentials.