Configure Single Sign-On Settings for Schoolnet

Using the Single Sign-On Setup for Schoolnet page, you can configure the settings needed for establishing a successful SSO connection between PowerSchool and Schoolnet making the transition between PowerSchool and Schoolnet seamless.

When configuring these settings, all links must follow these standards:

• Only HTTP over SSL (HTTPS) is allowed.
• Only SAML HTTP Redirect Profile is supported.
• Certificate of the PowerSchool Identity Provider (IDP) is required.
• PowerSchool is the only Identity Provider (IDP).

In addition to configuring single-sign on settings for PowerSchool, verify that your Schoolnet server is also configured for SSO. If it is not, a successful SSO connection between PowerSchool and Schoolnet cannot be established. For assistance, contact Schoolnet Client Solutions Center.

Configure PowerSchool Identity Provider Settings

Use this section to set up the SSO connection from PowerSchool to Schoolnet.

1. Navigate to the Plugin Configuration page. 
2. Click Schoolnet. 
3. Click Schoolnet SSO.

4. Use the following table to enter information in the PowerSchool Identity Provider Settings fields:

   All fields are required.

   Field	Description
   Name	The PowerSchool identity provider's name. The default is set to PowerSchool IDP.
   Entity ID	The PowerSchool server's public URL. The value is automatically populated using the values entered on the Global Server Settings page in the PowerSchool Configuration - External Access fields. Verify this is the correct value and update if necessary.
   Single Sign-On Certificate	Choose the certificate the PowerSchool IDP will use for single sign-on authentications.
   View PowerSchool IDP Metadata	The PowerSchool IDP Metadata must match what is stored in Schoolnet. This information can be used to diagnose communication issues. Click to view the PowerSchool identity provider's metadata. A separate window appears. When done viewing, close the window.

5. Do one of the following:
   • To continue, refer to the table in the Configure Schoolnet Service Provider Settings section.
   • Click Save.

Configure Schoolnet Service Provider Settings

Use this section to configure PowerSchool to accept SSO requests from Schoolnet.

1. Navigate to the Plugin Configuration page. 
2. Click Schoolnet. 
3. Click Schoolnet SSO.

4. Use the following table to enter information in the Schoolnet Service Provider Settings fields:
   
   All fields are required.

   Field	Description
   Name	The Schoolnet service provider's name. The default is set to Schoolnet. Do not change this value.
   Base URL	Enter the Schoolnet service provider's base URL. The default is set to: https://your.schoolnet.server.com/
   Metadata URL	Enter the Schoolnet service provider's metadata URL. The default is set to: https://your.schoolnet.server.com/samlsso/ServiceProvider.aspx
   Schoolnet Host Server and Port	Enter the Schoolnet service provider's host server and port. The default is set to: https://your.schoolnet.server.com:443

5. Click Save.
6. To continue, refer to Enable Single Sign-On for Schoolnet.

View PowerSchool User Identifying Elements for SSO

Use this section to view the SAML SSO Attributes used for establishing successful SSO connection between PowerSchool and Schoolnet.

1. Navigate to the Plugin Configuration page. 
2. Click Schoolnet. 
3. Click Single Sign-On Service. 

4. Use the following table to view information in the PowerSchool User Identifying Elements for Single Sign-On section:

   Field	Description
   firstName	The first name of the PowerSchool user-identifying element.
   lastName	The last name of the PowerSchool user-identifying element.