Articles in this section

See more

Which Identity Provider (IDP) should I use?

Avatar
Katie Clarkson
Updated
Follow

Single sign-on (SSO) is the easiest way for students, teachers, and admins to log in Clever to access various applications. It provides single sign on (SSO) access to all online learning applications from one location. Choosing an identity provider is an important first step in setting up single sign-on (SSO). If your district already uses one of the identity providers below, we encourage you to use that one! If you'd like to set up custom credentials from data in your student information system (SIS), check out Clever Passwords.

To manage the single sign-on (SSO) settings. navigate to your Clever district dashboard > Portal > SSO settings page. Feel free to contact us at Clever Support if the single sign-on (SSO) settings page is locked or you need help!

Which identity provider should I use?

Here’s a list of supported identity providers (IDPs). Click on the name of an IDP to learn more.

 Identity Provider

   Additional Requirements

   Things to Know

Active Directory
  • Active Directory Federation Services 2.x or 3.x
  • Metadata file accessible over HTTPS with a certificate signed by a valid Certificate Authority

Canvas
  • Must already be using Canvas LMS and able to provide the URL for your school or district’s instance of Canvas
  • Requires some manual testing to ensure correct setup.
  • Does NOT require the Canvas app integration with Clever

Clever Badges
  • Supported Web Browser (Google Chrome or Mozilla Firefox)
  • Printer
  • Computers/Devices with Webcams
  • Users log in with physical badges
  • Available for students only
  • Teachers and District Admins can print Badges for students

Clever Passwords

  
  • Users can reset their own passwords (optional)
  • Teachers can reset student passwords
  • District Admins can reset student, teacher, and school admin passwords

Google Apps
  • Users’ Google Apps email addresses must be synced to the Email field in Clever
  

LDAPS
  • LDAP Server
  • Whitelist Clever’s external IPs
  • Credentials for a BIND account
  • Requires some manual testing to ensure correct setup
  • Works best with the Clever Portal, as LDAP does not allow for persistent sessions
  • Do NOT send BIND account credentials (or any other credentials) over email

Office 365 / Azure Active Directory
  • Either:
    • Azure Active Directory Premium
    • Azure Active Directory and PowerShell Proficiency

Lenovo Stoneware / webNetwork
  • webNetwork 6.3.0167+

 

Can I use multiple identity providers?

Yes, you can! We can set up your single sign-on (SSO) to allow for multiple identity providers. However, only one SAML Connection (ADFS, Azure Active Directory, Stoneware, etc) can be active at a time. Contact Clever Support for help setting this up.



Related articles