Single sign-on (SSO) is the easiest way for students, teachers, and admins to log in to applications. It provides single sign on (SSO) access to all online learning applications in the same place. Choosing an identity provider is an important first step in setting up single sign-on (SSO). If your district already uses one of the identity providers below, we encourage you to use that one! If you'd like to use custom fields from your SIS, check out Clever Passwords.
To manage the single sign-on (SSO) settings from the Clever Dashboard, please navigate here. Feel free to contact us at Clever Support if the single sign-on (SSO) settings page is locked or you need help!
Which identity provider should I use?
Here’s a list of supported identity providers (IDPs). Click on the name of an IDP to learn more.
|
Identity Provider
|
Additional Requirements
|
Things to Know
|
|
Active Directory
|
- Active Directory Federation Services 2.x or 3.x
- Metadata file accessible over HTTPS with a certificate signed by a valid Certificate Authority
|
|
|
Canvas
|
- Must already be using Canvas LMS and able to provide the URL for your school or district’s instance of Canvas
|
- Requires some manual testing to ensure correct setup.
- Does NOT require the Canvas app integration with Clever
|
|
Clever Badges
|
- Supported Web Browser (Google Chrome or Mozilla Firefox)
- Printer
- Computers/Devices with Webcams
|
- Users log in with physical badges
- Available for students only
- Teachers and District Admins can print Badges for students
|
|
Clever Passwords
|
|
- Users can reset their own passwords (optional)
- Teachers can reset student passwords
- District Admins can reset student, teacher, and school admin passwords
|
|
Google Apps
|
- Users’ Google Apps email addresses must be synced to the Email field in Clever
|
|
|
LDAPS
|
- LDAP Server
- Whitelist Clever’s external IPs
- Credentials for a BIND account
|
- Requires some manual testing to ensure correct setup
- Works best with the Clever Portal, as LDAP does not allow for persistent sessions
- Do NOT send BIND account credentials (or any other credentials) over email
|
|
Office 365 / Azure Active Directory
|
- Either:
- Azure Active Directory Premium
- Azure Active Directory and PowerShell Proficiency
|
|
|
Lenovo Stoneware / webNetwork
|
|
|
Can I use multiple identity providers?
Yes you can! We can set up your single sign-on (SSO) to allow for multiple identity providers. However, only one SAML Connection (ADFS, Azure Active Directory, Stoneware, etc) can be active at a time. Contact Clever Support for help setting this up.
