Single Sign On (SSO) documentation for Edapt’s Learner Profile

• Administrator privileges for your Active Directory

• An ability to automatically identify users within your AD as belonging to one of three roles (either via a security group or user role):
• Teacher
• Student
• Admin (optional)

1. Create a new application in your Azure Active Directory by heading to:
Enterprise Application → New Application → Create you own application → Non-gallery

2. Enter the following parameters for your new application:
• Identifier (Entity ID): urn:amazon:cognito:sp:ap-southeast-2_zTeY7Fa9J
• Reply URL (Assertion Consumer Service URL): https://edaptsso.auth.ap-southeast-2.amazoncognito.com/saml2/idpresponse
• Sign on URL: https://lp-mvp.edapt.education/ssoLogin/

3. Map the attributes as follows:

Claim name	Value
http://schemas.microsoft.com/ws/2008/06/identity/claims/role	id of groups that identifies students/teachers*
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress	primary email address
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname	first name
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname	surname
school_id	school id or name

• For example, this might be the security group they belong to or user.role or similar, but needs to use the http://schemas.microsoft.com/ws/2008/06/identity/claims/role claim name. You will also need to email the IDs of each respective role to us so we can map it internally.

4. Download the XML file and send it to us, or share the metadata URL.

5. Please share the user details for a test student account and a test teacher account.

Note: Please ensure all parameters are entered correctly to ensure a smooth integration process.