Articles in this section

Enabling Google or Microsoft SSO

Avatar
Kristen Royster
Updated
Follow

The eSchoolData application has added the ability for districts to enable Single Sign-on for staff accounts through Google or Microsoft. This lesson guides district users through the required actions of using SSO.

Set Main App URL

The main application leading to the Setting page of eSP

  1. Go to Interoperability. 
  2. Choose eSP. 
  3. Select Settings. 
  4. On the Login Page tab, enter the District URL for the Main App if it is not done so already. 

User Email Addresses

The User Security Infomration page of the Main Application with the Excel icon highlighted in red.

All users must have an email address to successfully use the SSO option. To verify that all users have an email address within eSchoolData:

  1. Go to System. 
  2. Choose Administration. 
  3. Select User Security Information. 
  4. Select the Excel icon to download the list of all users within the system. 
  5. Use the Excel file to filter for any users without an email address. 

Users can see the email associated with the staff record from this report; it is likely the email also exists for the user account, but you can edit the user account to confirm the email is there as well.

After all users without email addresses have been identified: 

The User Maintenance page of the Main Application directing to the Edit icon.

  1. Go to User Maintenance. 
  2. Search for any users missing an email address. 
  3. Select the Edit icon for the desired user. 

Enter an email address for the user in the provide space and select save.

  1. Enter the user's Email Address. 
  2. Select Save. 

Enable SSO

EnableSSO.png

  1. Go to Interoperability.
  2. Choose Partners. 
  3. Select Google or Microsoft from the left hand menu. 
  4. Under SSO Settings, set enable SSO to Yes and enter any Allowed Domains into the available space. If multiple domains are added, please enter them as comma separated values.
  5. Select Save. 

The site must be set to the district level. The Save button will not be available if a specific school is chosen.

Troubleshooting

A staff member selects SSO option and selects their email. The screen then refreshes and returns them to the login screen.
  • Check the User Security Information export
  • Is the user associated to multiple records?
    • If Yes - confirm these records belong to the same person and are both active
    • If No - make sure the accounts are linked. If they are not linked then the system cannot validate
  • If any accounts are inactive: 
    • Navigate to the building and remove the email address from the old account
    • Unlink the accounts if previously linked
A staff member selects SSO option and selects their email. The screen refreshes and returns them to the login screen with the error message "Invalid User Id or password, please login again...".

image.png

  • Confirm the email address is in the staff user account
    • If Yes - confirm the domain matches domains listed in Allowed Domains under the SSO Setup page
    • If the Allowed Domains are correct:

Find_inactive_users.png

      1. Go to System > Administration > User Security Information - check for Inactive accounts, which will confirm whether one exists for the user.
      2. At the level of the building where there is the inactive account, go to System > Staff, find the user, edit, and uncheck the box for "Inactive Staff" and save - this will make the account "live" again.
      3. Go to System > Administration > User Maintenance - find the user that you have just activated, edit, remove the email address, and Save.
      4. To mark that same user as Inactive again, go back to System > Staff - recheck the box for "Inactive Staff", and Save.
  •  
Was this article helpful?
1 out of 1 found this helpful
Return to top

Related articles