Configure Canvas Single Sign-On (SSO) with Joomla OAuth Client Plugin

Overview

Single Sign-On (SSO) with Canvas in Joomla uses OAuth Authorization to provide users secure access to the Joomla site. With our Joomla OAuth Single Sign-On (SSO) plugin, Canvas acts as the OAuth provider, ensuring secure login for Joomla websites.

The integration of Joomla and Canvas simplifies and secures the login process using OAuth protocol. This solution allows users to access their Joomla sites with Single Sign-On (SSO) using their Canvas credentials, completely removing the need to store, remember, and reset multiple passwords.

In addition to offering OAuth Single Sign-On (SSO) using Canvas credentials, the plugin also provides advanced SSO features like user profile attribute mapping, role mapping, and Azure multi-tenant login and providing site access based on organization email domains. For further insights into the array of features we offer within the Joomla OAuth & OpenID Connect Client plugin, kindly visit our page here. You can follow the below steps to setup Canvas OAuth SSO with Joomla.

Configuration Steps

In this configuration, Canvas functions as the OAuth server, while Joomla allows users to log in with their Canvas credentials by utilizing the Joomla OAuth Client Plugin.

Step 2: Configure Canvas as OAuth Server

• Login to your Canvas LMS domain as an Account Administrator.
• Go to the Admin tab and select the domain for which you wish to enable Single sign-on.

• Go to the Developer keys link and click on the Developer key button then select the API key option from the dropdown.

• Enter the required details such as Key Name, enter the Redirect URI from miniOrange OAuth Client plugin under the OAuth Redirect URL field and click on Save button.

Step 3: Configure Client ID & Secret

• Now, copy the Client ID and Client Secret and save it on your miniOrange OAuth Client plugin Configuration.

• Go to the Step 2 [Client ID & Secret] tab of the Joomla OAuth Client plugin, here paste the Client ID, Client Secret and Tenant. Click on the Save Configuration button.

• Canvas Application Endpoints:

Scope	openid profile
Authorize Endpoint:	https://<your-site-url>/login/oauth2/auth
Access Token Endpoint:	https://<your-site-url>/login/oauth2/token
Get User Info Endpoint:	https://<your-site-url>/login/v2.1/users/self
Set Client Credentials:	In Both (In Header and In Body)