Följ

G Suite setup

(Swedish version is will be available at a later date)

This is not a fully complete version of the guide, if you encounter any problems or have any follow-up questions please contact us via our in-app chat or submit a support ticket through the support tab https://app.digiexam.com/app#/support.

1. Attribute table

The following user attributes are supported by DigiExam.

Screen_Shot_2018-08-16_at_16.20.46.png(Click the image or here for bigger image)

*If no sisSchoolUnitCode is passed with the Login Response the user will have access to all organizations in the school organizational hierarchy.

**If no OrganizationRoles or eduPersonScopedAffiliation is passed with the Login Response the user is assumed to have student access.

 

2. G-suite setup example

Setup custom user attributes for roles and organizations:

If you do not have user attributes setup for Skolfederation you need to add custom attributes to grant school staff users access in DigiExam.

 

  1. Login to Google Admin Console -> Users -> Manage custom attributes

  2. in the Customs fields add the following steps.   
  3. Name the Category and description.    
  4. Add an attribute with name OrganizationRoles > Text > Visible to admin > Single Value.

  5. Add an attribute with name eduPersonScopedAffiliation > Text > Visible to admin > Single Value.

  6. Add an attribute with name sisSchoolUnitCode > Text > Visible to admin > Single Value.

Screen_Shot_2018-08-15_at_14.09.42.png

 

Set values on custom attributes for a user:

  1. Go to Google Admin Console -> Users

  2. Select a user (Select a user that will be able to use SSO)

  3. Click on User Information.

  4. Edit the custom attributes you defined earlier.

    1. Roles: teacher
    2. edu:
    3. member@digiexam;employee@digiexam;staff@digiexam = Admin
    4. member@digiexam;employee@digiexam;faculty@digiexam = Teacher
    5. member@digiexam;employee@digiexam;faculty@digiexam;staff@digiexam = Teacher and admin
  5. sis = diffriensiate users within the umbrella organization 
  6. SAVE. 
    1. User_information_sheet.png

 

Setup the SAML app:

  1. Login to Google Admin Console -> Apps -> SAML Apps

  2. Press the add button in the bottom right corner

  3. Choose “Setup my own custom app”Step_1_of_5_Enable_SSO_for_SAML_Application.png

  4. Download the IDP Metadata file to your computerStep_2_of_5_Google_Idp_Information_1.2.png

  5. Press Next

  6. Fill in Basic Information

    1. Application Name: [Name]

    2. Description: (Optional)

    3. Logo:Pink_logomedium.png(Right click to save image)

    4. Press NextStep_3_of_5_Basic_Information_for_your_Custom_App.png

  7. Fill in Service Provider Details listed below (Step 4 of 5)

    1. ACS Url: https://app.digiexam.com/api/v1/saml/login

    2. Entity ID: https://app.digiexam.com/api/v1/saml/metadata

    3. Start URL: https://app.digiexam.com/app#/

    4. Signed Response: Leave unchecked
    5. Name ID: Basic Information -> Primary Email

    6. Name ID Format: PERSISTENTStep_4_of_5_Service_Provider_Details.png

    7. Press Next.

8. Setup Attributes mappings.

The Attributes need to be identical to either the Attribute name or the Urn name. See [Attributes Tables]Screen_Shot_2018-08-16_at_16.20.46.png

Step_5_of_5_Attribute_Mapping.png 

3. Setup the metadata on the DigiExam organization 

  1. Logging on https://app.digiexam.com/app#/login and then select the role of account manager.
  2. Head into the Integrations tab and upload the IDP metadata.DigiExam_Web_SAML_1.1.png
  3. Specify a Unit code, this is the sisSchoolUnitCode

  4. If multiple DigiExam organisations use the same IDP they will need to be connected to an umbrella organisation, see Attribute table. This connection can only be set up by DigiExam staff.

 

4. Starting the App and login challenge

Starting the app

If you browse into your apps in google you should find DigiExam in the list. Click on it and it will take you to the login challenge for first-time use. 

DigiExam_Web_SAML_3.png

Users that have registered accounts manually in DigiExam and then perform a Single Sign-On using SAML are challenged to enter their password once per organization to allow SSO. If they are connected to an umbrella organization they only need to sign on once and they get access to all underlying organizations.

DigiExam_Web_SAML_4.png

The users only need to do this once and it is in place to prevent unauthorized access to user accounts by malicious identity providers.

---

Here you can find all the available docs or images for download.

 

Var denna artikel till hjälp?
0 av 0 tyckte detta var till hjälp
Har du fler frågor? Skicka en förfrågan

Kommentarer