Creating iSAMS SSO

ISAMS SSO can be enabled independently for staff, parents and students. In order to set it up, please follow the steps in iSAMS:

1. Go to the Authentication app in the Control Panel.
2. Select Manage SSO Clients in the menu on the right-hand side.
3. Click the Create SSO Client button above the grid. 

Please note that an individual SSO Client needs to be created for each user type (Staff, Parent, Student).

1. Details Tab

1. Client ID: 
   • Staff: schoolsbuddy.isams
   • Parent: schoolsbuddy.pportal
   • Student: schoolsbuddy.sportal
2. Client Name: Enter a clear name for the client. Example: Parent Portal for SchoolsBuddy SSO.
3. Client URL (optional): https://www.schoolsbuddy.com/
4. Login Screen: Select an option from the dropdown to specify which login screen should be used.
   • Staff: iSAMS
   • Parent: iSAMS.Portal.Parent
   • Student: iSAMS.Portal.Student
5. Backchannel Logout URI: Leave blank.
6. Authentication Flows: Hybrid.

2. Scope tab

Select openid and email

3. Whitelist URIs

1. Allowed Post Login URIs : Please refer to the table below. Depending on your school's location and the role type, whitelist the appropriate URI for each client.

   	Schools based in APAC	Schools based in EMEA	Schools based in North/Central/South America
   Staff	https://accounts2.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain1	https://accounts1.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain1	https://accounts3.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain1
   Parent	https://accounts2.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain2	https://accounts1.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain2	https://accounts3.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain2
   Student	https://accounts2.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain3	https://accounts1.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain3	https://accounts3.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain3

   
   You can find your SchoolsBuddy domain in the URL of your SchoolsBuddy page. eg: ttpd
2. Allowed Post Logout URIs: whitelist the appropriate URI depending on your school's location, regardless of user type.
3. CORS Enabled Origins: whitelist the appropriate URI depending on your school's location, regardless of user type.
   

   Schools based in APAC	Schools based in EMEA	Schools based in North/Central/South America
   https://accounts2.schoolsbuddy.net	https://accounts1.schoolsbuddy.net/	https://accounts3.schoolsbuddy.net/

Upon clicking “Save & Close” when creating a new client, a pop-up like this will appear with the Client ID and Client Secret. Please make a note of the secret before closing the window, as it will not show when making changes to existing clients

Please provide us with the Client ID and Client Secret via this form, and let us know that you have submitted the form.