-
SAML Administration Overview
SAML, or Security Assertion Markup Language, enables users to access multiple web applications using one set of login credentials. SAML based Single Sign-On (SSO) is the most often requested method for user authentication within Brightspace. Since SSO is a customer managed workflow, D2L built an administrative front-end to…
-
Protect the privacy of enrolled learners
Protect the privacy of enrolled learners Enable or disable the display of users' non-directory information by selecting or clearing User Information Privacy role permissions. Non-directory information is information your organization holds private. Directory information includes anything that should be visible to users,…
-
Set password policy restrictions
From the Admin Tools menu, click Password Policy. On the Password Policy page, select any of the following restrictions:* Password Reuse Policy - Prevents the user from re-using old passwords. You must specify a number of recently used passwords for the system to check. * Derivation of Password From User Identity Fields -…
-
Enable Just-In-Time User Provisioning
The Just-In-Time User Provisioning (JIT Provisioning) function helps users to log in to Brightspace and automatically creates their Brightspace user account without an administrator intervening. Each time users log in using Just-In-Time User Provisioning, their data is updated with the data obtained from the identity…
-
Tools affected by User Information Privacy permissions
The following table indicates the tools affected by User Information Privacy permissions. Tool Field affected Displayed text when the permissions are disabled Assignments First Name Last Name Anonymous User Attendance First Name Anonymous User Last Name Anonymous User Blog First Name Anonymous User Last Name Anonymous User…
-
Create a validation regular expression
You should update the language term if you want to use the validation regular expression to set password requirements. Users see the language term describing the password requirements, not the string containing the validation regular expression. From the Admin Tools menu, click Config Variable Browser. Navigate to the…
-
Manage an Identity Provider
Add an Identity Provider Visit your organization’s Identity Provider tool or website and create a new application. In Brightspace, from Admin Tools select SAML Administration. Click Add Identity Provider. From the Add New Identity Provider page, collect the Brightspace Metadata URL by clicking Copy. Note: The Brightspace…
-
User abilities affected by User Information Privacy permissions
The following table indicates the user abilities affected by User Information Privacy permissions. User ability Impact Impersonation If you clear any User Information Privacy role permission check box, all users, regardless of access to non-directory information, lose their ability to impersonate users, and the Impersonate…
-
Security administration tasks
Security administration tasks In Brightspace, security administration tasks include: * Assign tool permissions to users with the Roles and Permissions tool * Set password policy restrictions with the Password Policy tool * Protect the privacy of enrolled learners with the User Information Privacy tool * Define a list of…
-
Permission requirements
The Security > Manage SAML Authentication permission is required to access the SAML Administration tool. Once the Manage SAML Authentication permission is enabled, the SAML Administration tool is visible under Admin Tools > Security. The Security > Manage SAML JIT Provisioning Configurations permission is required to…