These steps will guide you through setting up the single sign-on functionality between ADSelfService Plus and Instructure.
Log in to ADSelfService Plus as an administrator.
Navigate to Configuration → Self-service → Password Sync/Single Sign-on.
Locate and click on Canvas LMS by Instructure in the list of applications provided.
Click Download SSO Certificate link in the top-right corner of the screen.
Instructure (Service Provider) configuration steps
Login to Instructure portal with an administrator’s credentials.
Switch to Admin view by clicking on the corresponding link from the bottom of the screen.
Select Admin from the left pane and select the domain for which you wish to enable Single sign-on.
Click on Authentication in the left pane.
Navigate to SAML
In the IdP Entity ID and Log On URL field, enter the Login URL copied in Step 5 of Prerequisite.
In the Log Out URL field, enter the Logout URL copied in Step 5 of Prerequisite.
In the Certificate FingerPrint field, enter the SHA1 FingerPrint copied in Step 5 of Prerequisite.
In the position field, select 1 from the drop-down box.
Click Save to complete the configuration.
ADSelfService Plus (Identity Provider) configuration steps
Now, switch to ADSelfService Plus’ Canvas LMS by Instructure configuration page.
In the Domain Name field, enter the domain name of your email address. For example, if you use firstname.lastname@example.org to log in to Instructure, then thinktodaytech.com is the domain name.
In the SP Identifier field, enter the SP Identifier of your Canvas LMS account.
Example: If your Instructure domain URL is https://test.instructure.com, your SP Identifier is test.
Enter a Description for the connection.
In the Available Policies field, select the policies for which you wish to enable single sign-on.
Your users should now be able to sign in to Instructure through ADSelfService Plus.
For Canvas LMS by Instructure, only IDP initiated flow is supported.