SchoolsBuddy Help Centre Help Centre home page
Product

Creating iSAMS SSO

ISAMS SSO can be enabled independently for staff, parents and students. In order to set it up, please follow the steps in iSAMS:

  1. Go to the Authentication app in the Control Panel.
  2. Select Manage SSO Clients in the menu on the right-hand side.
  3. Click the Create SSO Client button above the grid. 

Please note that an individual SSO Client needs to be created for each user type (Staff, Parent, Student).

1. Details Tab

  1. Client ID: 
    • Staff: schoolsbuddy.isams
    • Parent: schoolsbuddy.pportal
    • Student: schoolsbuddy.sportal
  2. Client Name: Enter a clear name for the client. Example: Parent Portal for SchoolsBuddy SSO.
  3. Client URL (optional): https://www.schoolsbuddy.com/
  4. Login Screen: Select an option from the dropdown to specify which login screen should be used.
    • Staff: iSAMS
    • Parent: iSAMS.Portal.Parent
    • Student: iSAMS.Portal.Student
  5. Backchannel Logout URI: Leave blank.
  6. Authentication Flows: Hybrid.

2. Scope tab

Select openid and email

3. Whitelist URIs

  1. Allowed Post Login URIs : Please refer to the table below. Depending on your school's location and the user type, whitelist the appropriate URI for each client.
      Schools based in APAC Schools based in EMEA Schools based in North/Central/South America
    Staff https://accounts2.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain1 https://accounts1.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain1 https://accounts3.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain1
    Parent https://accounts2.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain2

     

    		 https://accounts1.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain2 https://accounts3.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain2
    Student https://accounts2.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain3 https://accounts1.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain3 https://accounts3.schoolsbuddy.net/signin-isams-YourSchoolsBuddyDomain3

    You can find your SchoolsBuddy domain in the URL of your SchoolsBuddy page. eg: ttpd
  2. Allowed Post Logout URIs: whitelist the appropriate URI depending on your school's location, regardless of user type.
  3. CORS Enabled Origins: whitelist the appropriate URI depending on your school's location, regardless of user type.
    Schools based in APAC Schools based in EMEA Schools based in North/Central/South America
    https://accounts2.schoolsbuddy.net https://accounts1.schoolsbuddy.net/

    https://accounts3.schoolsbuddy.net/

Upon clicking “Save & Close” when creating a new client, a pop-up like this will appear with the Client ID and Client Secret. Please make a note of the secret before closing the window, as it will not show when making changes to existing clients

Please provide us with the Client ID and Client Secret via this form, and let us know that you have submitted the form.

 

Related articles