Which identity provider should I use?

Single sign-on (SSO) is the easiest way for students, teachers, and admins to log in to applications. It provides single sign on (SSO) access to all online learning applications in the same place. Choosing an identity provider is an important first step in setting up single sign-on (SSO). If your district already uses one of the identity providers below, we encourage you to use that one! If you'd like to use custom fields from your SIS, check out Clever Passwords.

To manage the single sign-on (SSO) settings from the Clever Dashboard, please navigate here. Feel free to contact us at Clever Support if the single sign-on (SSO) settings page is locked or you need help!

Here’s a list of supported identity providers (IDPs). Click on the name of an IDP to learn more.

Identity Provider	Additional Requirements	Things to Know
Active Directory	Active Directory Federation Services 2.x or 3.x Metadata file accessible over HTTPS with a certificate signed by a valid Certificate Authority	Requires manual Claims Rules setup
Canvas	Must already be using Canvas LMS and able to provide the URL for your school or district’s instance of Canvas	Requires some manual testing to ensure correct setup. Does NOT require the Canvas app integration with Clever
Clever Badges	Supported Web Browser (Google Chrome or Mozilla Firefox) Printer Computers/Devices with Webcams	Users log in with physical badges Available for students only Teachers and District Admins can print Badges for students
Clever Passwords		Users can reset their own passwords (optional) Teachers can reset student passwords District Admins can reset student, teacher, and school admin passwords
Google Apps	Users’ Google Apps email addresses must be synced to the Email field in Clever
LDAPS	LDAP Server Whitelist Clever’s external IPs Credentials for a BIND account	Requires some manual testing to ensure correct setup Works best with the Clever Portal, as LDAP does not allow for persistent sessions Do NOT send BIND account credentials (or any other credentials) over email
Office 365 / Azure Active Directory	Either: Azure Active Directory Premium Azure Active Directory and PowerShell Proficiency	Requires manual Claims Rules setup
Lenovo Stoneware / webNetwork	webNetwork 6.3.0167+	Works best with single sign-on (SSO) links embedded in Stoneware portal

Can I use multiple identity providers?

Yes you can! We can set up your single sign-on (SSO) to allow for multiple identity providers. However, only one SAML Connection (ADFS, Azure Active Directory, Stoneware, etc) can be active at a time. Contact Clever Support for help setting this up.

Articles in this section

Which identity provider should I use?