Configuring SAML SSO for Blackboard

This guide offers step-by-step instructions to configure single sign-on to Blackboard through ADSelfService Plus.

Prerequisite

  1. Log in to the ADSelfService Plus console with admin credentials.

  2. Navigate to Configuration → Self-Service → Password Sync/Single Sign On.

  3. In the dashboard that displays the list of applications supported by ADSelfService Plus, click Blackboard.

  4. Click Download SSO Certificate located on the top-right corner of the page.

  5. In the pop-up that appears, copy the Login URL and click the Download Metadata file link.


    saml-authentication-settings

Blackboard (Service Provider) configuration:

  1. Log in to Blackboard with admin credentials.

  2. Navigate to System Admin → Authentication. 

  3. Select Create Provider → SAML. Enter the following settings.

    • Name → Type an appropriate name.

    • Authentication Provider → set as Active.

    • User Lookup Method → Username.

    • Restrict by Hostname → Use this provider for any hostnames.

    • Link Text → Type an appropriate link text.

  4. Select Save and Configure.

  5. In the Entity ID field of the Service Provider Settings, enter the Login URL from step 5.

  6. In the Single Logout Service Type, check the Post and Redirect checkbox.

    saml-authentication-settings
  7. Select the Data Source for which single sign-on must be enabled from the given drop-down list.

    saml-authentication-data-source
  8. Select Identity Federation for the Identity Provider Type.

  9. In the Discovery Service URL, enter the Login URL from step 5.

    saml-authentication-discovery-service-url
  10. For the Metadata File, upload the downloaded metadata file from step 5.

  11. In the Remote User ID field, select NameID.

  12. Map the SAML attribute names with valid user attributes such as,

    • First Name as first_name

    • Last Name as last_name

    • Email as mail


ADSelfService Plus (Identity Provider) configuration steps

  1. Navigate to ADSelfService Plus' Blackboard Configuration page

  2. In the Domain Name field, enter the domain name of your email address. For example, if you use johndoe@thinktodaytech.com to log in to Blackboard, then thinktodaytech.com is the domain name.

  3. In the Display Name field, provide an appropriate display name.

  4. In the SP identifier field, enter the name of your organization found in the Blackboard portal URL. For example, if the portal URL is thinktoday.blackboard.com, the SP Identifier is thinktoday.

    saml-authentication-description
  5. Provide an appropriate description in the Description field.

  6. In the Available Policies field, select the policies for which SSO must be enabled.

  7. Click Save.

For Blackboard, SP initiated single sign-on is supported.


Go to Top
Copyright © 2020, ZOHO Corp. All Rights Reserved.
ManageEngine