Setting up single sign-on (SSO)

Introduction  

If your school would like to set up single sign-on (SSO) for Zunia, your school's IT administrator/System administrator can connect using OpenID Connect or SAML. 

To connect with OpenID Connect, you'll need to add the following details from your IdP to Zunia: 

• client ID 
• secret key 
• issuer url 

To connect with SAML, you'll need to: 

• fetch ACS, issuer and metadata urls from Zunia and provide these to your IdP. 
• once your IdP provides their certificate and SSO url, you'll need to add these back to Zunia. 

Configuring SSO for Zunia 

To set up SSO for your school, go to System configuration > Single sign-on. 

1. Select Get started.
2. Select whether you want to set up with OpenID Connect or SAML. 
3. For OpenID Connect, enter your client ID, Issuer URL and secret key into the relevant fields and Save. 
4. For SAML, select Fetch to receive ACS, Issuer and Metadata urls that will need to be shared with your school's IdP. Enter the SSO URL and Certificate once you receive them from your IdP and select Save. 

If all the credentials from your school's IdP match, you’re connected by SSO. 

Notes: 

• It's crucial all credentials copy/pasted or typed into the fields is accurate. You won't be able to access Zunia if you need to log in again and will need to contact Support to correct the details. 
• If you can't see Single sign-on in your System configuration menu - it's likely that you are still on our old IdP. We're migrating all existing Zunia schools over to our new IdP and you'll be able to set up SSO when your school's migrated. We'll inform your school's System Administrator when this will happen.