Creating iSAMS SSO

ISAMS SSO can be enabled independently for staff, parents and students. In order to set it up, please follow the steps in iSAMS:

1. Go to the Authentication app in the Control Panel.
2. Select Manage SSO Clients in the menu on the right-hand side.
3. Click the Create SSO Client button above the grid. 

Please note that an individual SSO Client needs to be created for each user type (Staff, Parent, Student).

1. Details Tab

1. Client ID: 
   • Staff: schoolsbuddy.isams
   • Parent: schoolsbuddy.pportal
   • Student: schoolsbuddy.sportal
2. Client Name: Enter a clear name for the client. Example: Parent Portal for SchoolsBuddy SSO.
3. Client URL (optional): https://www.schoolsbuddy.com/
4. Login Screen: Select an option from the dropdown to specify which login screen should be used.
   • Staff: iSAMS
   • Parent: iSAMS.Portal.Parent
   • Student: iSAMS.Portal.Student
5. Backchannel Logout URI: Leave blank.
6. Authentication Flows: Hybrid.

2. Scope tab

Select openid and email

3. Whitelist URIs

1. Allowed Post Login URIs : Please refer to the table below. Depending on your school's location and the role type, whitelist the appropriate URI for each client.
   

   Region	Schools based in APAC
   Staff	https://accounts2.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain1
   Parent	https://accounts2.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain2
   Student	https://accounts2.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain3

   Region	Schools based in Mainland China
   Staff	https://accounts.schoolsbuddy.cn/signin-isams-YourSchoolsBuddyDomain1
   Parent	https://accounts.schoolsbuddy.cn/signin-isams-YourSchoolsBuddyDomain2
   Student	https://accounts.schoolsbuddy.cn/signin-isams-YourSchoolsBuddyDomain3

   Region	Schools based in EMEA
   Staff	https://accounts1.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain1
   Parent	https://accounts1.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain2
   Student	https://accounts1.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain3

   Region	Schools based in North/Central/South America
   Staff	https://accounts3.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain1
   Parent	https://accounts3.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain2
   Student	https://accounts3.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain3

   
   You can find your SchoolsBuddy domain in the URL of your SchoolsBuddy page. eg: ttpd
2. Allowed Post Logout URIs: whitelist the appropriate URI depending on your school's location, regardless of user type.
3. CORS Enabled Origins: whitelist the appropriate URI depending on your school's location, regardless of user type.
   

   APAC	https://accounts2.schoolsbuddy.net
   Mainland China	https://accounts.schoolsbuddy.cn
   EMEA	https://accounts1.schoolsbuddy.net
   North/Central/South America	https://accounts3.schoolsbuddy.net

   
   Upon clicking “Save & Close” when creating a new client, a pop-up like this will appear with the Client ID and Client Secret. Please make a note of the secret before closing the window, as it will not show when making changes to existing clients

Please provide us with the Client ID and Client Secret via this form, and let us know that you have submitted the form.