This article contains the following:
1. Overview
2. Getting started
3. Setup
4. Frequently Asked Questions
Overview
SSO (Saved Passwords) applications are apps that don't currently have a rostering or single sign-on (SSO) integration with Clever, but can still be accessed via SSO through the Clever Portal. This means districts can provide users with a seamless SSO experience for almost any learning application even if it is not an existing Clever partner.
With the SSO (Saved Passwords) option, rostering data and user accounts are not synced to the app by Clever. This means they must be created within the application in advance, and user login credentials need to be manually set by the district admin, or by the users themselves. Clever will securely store these credentials so district users are logged into the applications automatically via single sign-on through Clever.
This article provides a detailed overview of SSO (Saved Passwords) applications, and the setup process for launching these apps at your district.
Getting started
- District user accounts and credentials for the app:
- The first step is to ensure your district users have accounts and login credentials for the SSO (Saved Passwords) application. This would be done by working with the app partner directly before setting the app up in Clever.
- Non-iOS devices:
- The second step is insuring the Clever browser extension is installed on all non-iOS devices that will be used to access the application through Clever. This includes home devices for users who will be accessing this app from home. The Clever browser extension facilitates single sign-on for SSO (Saved Passwords) apps. Please visit this article for more.
- The Clever browser extension is not required for iOS devices (e.g. iPads, iPhones) as these devices use the Clever app which acts as the browser extension. Please visit this article for more.
- The second step is insuring the Clever browser extension is installed on all non-iOS devices that will be used to access the application through Clever. This includes home devices for users who will be accessing this app from home. The Clever browser extension facilitates single sign-on for SSO (Saved Passwords) apps. Please visit this article for more.
For devices where the browser extension cannot be downloaded (e.g. Android, Kindle Fire), Saved Passwords apps will not be accessible. For details, visit: Clever Browser & Device Compatibility
Setup
After configuring the above, there are three steps to set up any application for universal single sign-on (SSO) from your Clever Portal.
Looking for additional support setting up the Clever Portal? Check out our Clever Academy Quick Start - Setting up your Portal course
1. Find and add an application
Visit the Request Applications page in your Clever district dashboard to find the application you would like to use. Once identified, click 'Request App'.
Next, select if you would like to request that the application provider begin supporting rostering via Clever Secure Sync. The more requests Clever receives, the more likely it is to happen in the future.
Finally, select 'Request Application'.
2. Configure user access
The next screen will provide you with an option to share the added application with particular schools.
You can select the schools as listed and select 'Request with sharing' or choose 'Request and share later'.
Sharing rules can always be changed from the individual application's page under 'Modify user selection'.
Clever Tip: For more information on setting up your sharing permissions, check out How do I set my sharing permissions for applications?
3. Provide your login information
Once you have added the application and set up sharing rules, you'll need to provide information on how Clever should log in your users.
First, select 'Begin matching' on the added application's page:
Some applications require district specific information for logins to work. If this is the case, the first step will prompt you for the information Clever needs. You will need to obtain the information in these fields from the application. Please see the example below:
You can then choose whether credentials for this application will be set at a district level or if individual users will set their own credentials.
If you choose to have individuals set their own credentials, take note of the flow diagram that details the process, and click “Confirm”.
Next, you will need to provide login information:
1. Selecting an example user
To begin matching credentials, select an existing user for the specified user type (e.g. student, teacher, staff). This step is meant to provide you with an example as you configure the credentials for this resource. We suggest entering a user for whom you already have the username and password. Once you have selected a user, you will see the data that’s synced from your SIS populated in the box below.
2. Choosing a formula type
Next, you will choose a formula type for both Username and Password.
You can choose from the following:
- Exact user attribute
- This setting will pull data fields from a user’s profile as it is synced from your SIS. If we are not currently pulling in the fields you need, then reach out to Clever support to investigate possible alternate mappings.
- This setting will pull data fields from a user’s profile as it is synced from your SIS. If we are not currently pulling in the fields you need, then reach out to Clever support to investigate possible alternate mappings.
- Manual input from user at first login
- This setting allows users to input their own credentials the first time they access the Saved Passwords resource via the Clever portal. These credentials will be saved for all future logins.
- Custom Formula
- You can use existing fields in the user’s profile to form custom strings for the Username/Password. Please see this Help Center article: How do I manage Saved Passwords application credentials?
- CSV via SFTP
- When a user's credentials are uploaded via CSV, they will not be asked to log in the first time they access the application through Clever.
- Upload a file containing each user’s credentials using SFTP. You can find the SFTP credentials in your district dashboard > Sync > Settings page under CREDENTIALS SFTP SETTINGS
- One time CSV upload
- Upload a file containing each user’s credentials directly to the site using drag and drop.
You may choose any combination of these options for your username and password configurations. Once you have completed both fields, you will see a preview of the credentials in the card on the left. Click “Confirm” to save those changes. You can return and edit your formulas by clicking on the corresponding card on the left.
For additional instructions, please visit: How do I manage Saved Passwords application credentials?
Frequently Asked Questions
What device(s) can I use with Saved Passwords applications?
- Applications with Saved Passwords can be used on any devices that support browser extensions with Chrome, Firefox, or Edge. Desktop computers, laptops, Chromebooks, and Windows devices are all supported. Saved Passwords is also supported on iOS devices running on iOS 9.0 and above with the most up to date Clever app installed.
Saved Passwords functionality on iOS For more information on how to set this up, please see Clever Saved Passwords for iOS
What if I don't see an application I want?
Where are some additional resources for SSO (Saved Passwords) apps?
Please visit these articles for additional help rolling out SSO (Saved Passwords) apps in Clever: