Single Sign-On (SSO) for your Apps/Websites using Clever as OAuth Identity Provider (IDP) | Clever OAuth SSO Login

Step 1: Configure miniOrange as Service Provider (SP) in Clever Portal

• Go to Clever Signup if you want to create new account or login to your Clever account.
• When you login for the first time,Overview window pops us, you can find documention and help regarding Clever. Click on Next.

• The next step is Invite Teammates .Click on Add Team Member and you can add the your team with their email. Click on Next.

• In Provide Application Info,enter description and Application icon of you app. Click on Save

• Click on Settings (From left section) > Instant Login. Here, you need to copy the Redirect URL from minOrange console.

• To get the Redirect URL:
• Go to miniOrange Admin Console.
• From the left navigation bar select Identity Provider.

• Copy the Callback URL as Redirect URL.Enter the Redirect/Callback URL in the Redirect URIs text field and click on Save.
• Go to General Tab. You will find all you profile info under Profile Settings. The API Credentials will provide Client ID and secret.
• Copy the Client ID and the Client secret from API Credentialsand store it in your miniOrange OAuth app configuration page under the Client ID and Client Secret text fields respectively.

Step 2: Configure Clever as OAuth 2.0 IDP Provider in miniOrange.

• Go to miniOrange Admin Console.
• From the left navigation bar select Identity Provider. Select Oauth

• Enter the following values.

IdP Name	Custom Provider
IdP Display Name	Choose appropriate Name
OAuth Authorize Endpoint	https://clever.com/oauth/authorize
OAuth Access Token Endpoint	https://clever.com/oauth/tokens
OAuth Get User Info Endpoint (optional)	https://api.clever.com/v1.1/me
Client ID	From step 1
Client secret	From step 1
Scope	read:district_admins_basic, read:school_admins_basic, read:students_basic, read:teachers_basic, read:user_id

Step 3: Configure Your application in miniOrange

Step 4: Login using IDP selection page (Optional)

• You can configure multiple IDPs (Identity Providers) and give users the option to select the IDP of their choice to authenticate with.
  For Example - It could be multiple AD domains belonging to different departments or multiple okta organizations.

Few usecases where customers configure multiple IDPs -


• Suppose you have a product which many of your clients use and each client has their own unique IDP so you want them to SSO into your product as well using their existing IDP only. miniOrange provides a centralized way to connect with all IDPs in a very easy manner and integrate SSO into your application.
• Suppose you are providing a course to many universities, each having a unique SAML, OAuth protocol supported IDP's like Shibboleth, ADFS, CAS, etc. You can provide Single Sign-On (SSO) into your course application to all these universities by integrating with all of them using a single platform provided by miniOrange.
• This is the endpoint to call from your SAML application -

  For Cloud IDP -	https://login.xecurify.com/moas/discovery?customerId=<customer_id>
  For On-Premise IDP -	https://yourdomain.com/discovery?customerId=<customer_id>

• You should copy the Customer Key from admin console-> Settings -> and replace it with <customer_id> here. Once configured in SP, when you initiate the login from Service Provider, a user will be redirected to IDP Selection Page listing all IDPs configured for that account.

You can see the screenshot below of the IDP Selection Page with a list of IDPs .



Note: To view the IDP in drop-down list, go to Identity Providers tab > against your configured IDP > Select >Edit , here Enable the Show IdP to Users option.


• You can also change the look and feel of this page. Login to miniOrange Admin console. Navigate to Customization -> Branding Configuration. See the below screenshot for reference-
  

1. You can customize the title of this page.
2. Change the logo and favicon for this page.
3. Change the background and button color for this page from admin UI.

×