SSO Configuration

BE ADVISED:

Configuring your Paradigm site to have a single sign-on capability is best discussed with our Development Team first for the details of the instructions. Raise a HelpDesk ticket to start.

SSO with Azure

The instructions are found here: Azure Active Directory Authentication

The following are the details that we need to configure your Paradigm site (following the instructions from this link):

• ParadigmEMS App ID (app_id)

• Tenant ID (tenant_id)

• Client Secret Key (app_password?)

A test account and the link where to log in to determine if the SSO configuration is working perfectly are also needed.

SSO with WordPress

Learn more here.

Configure Paradigm Login Screen

After the SSO configuration, the following are required to be configured to make your Paradigm site ready for single sign-on.

You can refer to this short demo video on how SSO works when configured on your site.

Referring to the above screenshot, there are two labels that you can customise: header_sso_login and button_sso_login. Refer to the instructions on how you can edit these labels: Edit Form Labels

User Account Configuration

To make sure that the user account is accepted by the system to log in using SSO, refer to the following instructions:

The steps below also resolve the error "Remote Login Failed User Not Found" when a user tries to log in using SSO in Paradigm.

1. Load the user account.

   • For Contacts, navigate to Contacts > Search menu and search for the user. After loading the record, choose Contacts > Login menu.

   • For Students, load the student record and navigate to the Student > Student Details > Login menu.

2. Under the Login screen, go to the CHANGE REMOTE AUTH ID section and set the Remote Authorisation Identifier field if it's not yet set. Click the UPDATE REMOTE AUTH ID button.

NOTE:

For existing students, this section has already been set if they were enrolled in at least one subject last year (2022). For new students, this section is set automatically every time a student is added to the system with an Active status.

setting the Remote Authorisation Identifier of a user for SSO