Configure Single Sign-On Settings for Schoolnet

On this page:

Using the Single Sign-On Setup for Schoolnet page, you can configure the settings needed for establishing a successful SSO connection between PowerSchool and Schoolnet making the transition between PowerSchool and Schoolnet seamless.

When configuring these settings, all links must follow these standards:

• Only HTTP over SSL (HTTPS) is allowed.
• Only SAML HTTP Redirect Profile is supported.
• Certificate of the PowerSchool Identity Provider (IDP) is required.
• PowerSchool is the only Identity Provider (IDP).

Note: In addition to configuring single-sign on settings for PowerSchool, verify that your Schoolnet server is also configured for SSO. If it is not, a successful SSO connection between PowerSchool and Schoolnet cannot be established. For assistance, contact Schoolnet Client Solutions Center.

Configure PowerSchool Identity Provider Settings

Use this section to set up the SSO connection from PowerSchool to Schoolnet.

1. On the start page, choose System under Setup in the main menu. 
2. Under Server, click System Settings. 
3. Click Plugin Management Configuration. 
4. Click Schoolnet. 
5. Click Schoolnet SSO.

6. Use the following table to enter information in the PowerSchool Identity Provider Settings fields:

   Note: All fields are required.

   Field	Description
   Name	The PowerSchool identity provider's name. The default is set to PowerSchool IDP.
   Entity ID	The PowerSchool server's public URL. The value is automatically populated using the values entered on the Global Server Settings page (System > System Settings > Global Server Settings > PowerSchool Configuration - External Access fields). Verify this is the correct value and update if necessary.
   Single Sign-On Certificate	Choose the certificate the PowerSchool IDP will use for single sign-on authentications.
   View PowerSchool IDP Metadata	The PowerSchool IDP Metadata must match what is stored in Schoolnet. This information can be used to diagnose communication issues. Click to view the PowerSchool identity provider's metadata. A separate window appears. When done viewing, close the window.

7. Do one of the following:
   • To continue, see Step 6 of Configure Schoolnet Service Provider Settings.
   • Click Save.

Configure Schoolnet Service Provider Settings

Use this section to configure PowerSchool to accept SSO requests from Schoolnet.

1. On the start page, choose System under Setup in the main menu. 
2. Under Server, click System Settings. 
3. Click Plugin Management Configuration. 
4. Click Schoolnet. 
5. Click Schoolnet SSO.

6. Use the following table to enter information in the Schoolnet Service Provider Settings fields:
   
   Note: All fields are required.

   Field	Description
   Name	The Schoolnet service provider's name. The default is set to Schoolnet. Note: Do not change this value.
   Base URL	Enter the Schoolnet service provider's base URL. The default is set to: https://your.schoolnet.server.com/
   Metadata URL	Enter the Schoolnet service provider's metadata URL. The default is set to: https://your.schoolnet.server.com/samlsso/ServiceProvider.aspx
   Schoolnet Host Server and Port	Enter the Schoolnet service provider's host server and port. The default is set to: https://your.schoolnet.server.com:443

7. Click Save.
8. To continue, see Enable Schoolnet Single Sign-On.

View PowerSchool User Identifying Elements for SSO

Use this section to view the SAML SSO Attributes used for establishing successful SSO connection between PowerSchool and Schoolnet.

1. On the start page, choose System under Setup in the main menu. 
2. Under Server, click System Settings. 
3. Click Plugin Management Configuration. 
4. Click Schoolnet. 
5. Click Single Sign-On Service. 

6. Use the following table to view information in the PowerSchool User Identifying Elements for Single Sign-On section:

   Field	Description
   firstName	The first name of the PowerSchool user-identifying element
   lastName	The last name of the PowerSchool user-identifying element