-
SAML Administration Overview
SAML, or Security Assertion Markup Language, enables users to access multiple web applications using one set of login credentials. SAML based Single Sign-On (SSO) is the most often requested method for user authentication within Brightspace. Since SSO is a customer managed workflow, D2L built an administrative front-end to…
-
Enable Just-In-Time User Provisioning
The Just-In-Time User Provisioning (JIT Provisioning) function helps users to log in to Brightspace and automatically creates their Brightspace user account without an administrator intervening. Each time users log in using Just-In-Time User Provisioning, their data is updated with the data obtained from the identity…
-
Manage an Identity Provider
Add an Identity Provider Visit your organization’s Identity Provider tool or website and create a new application. In Brightspace, from Admin Tools select SAML Administration. Click Add Identity Provider. From the Add New Identity Provider page, collect the Brightspace Metadata URL by clicking Copy. Note: The Brightspace…
-
Permission requirements
The Security > Manage SAML Authentication permission is required to access the SAML Administration tool. Once the Manage SAML Authentication permission is enabled, the SAML Administration tool is visible under Admin Tools > Security. The Security > Manage SAML JIT Provisioning Configurations permission is required to…
-
Set the Default Brightspace Log in Experience
From the SAML Administration page, locate the Set the default Brightspace log in experience card. Once an Identity Provider has been added, the display name you set for it displays here as an option along with Local Brightspace Log in Page. Select the radio button next to your Identity Provider’s display name and click…
-
SAML Administration FAQs
Q: What are some of the benefits of using SAML? A: Using SAML eliminates the need for IPAS / Shibboleth Service Provider configuration. Q: What SAML Authentication workflows am I able to perform? A: Initial Identity Provider registration and testing, Log in Page experience (setting the default login experience to an…