[Facility] AD single sign on for ePortal

[Trapper]

Hi Folks,

 

Has anyone turned this feature on? How do you attach an AD account to an ePortal account? Most of our staff now have a random code. For example if I joined the school in the 1990s my code would be my initials such as MJP. Now the admin team are just assigning the next random code that is free such as BAW.

 

Thanks

[Banjo]

There should guidance notes on this from AL.

[themightymrp]

We don't use the SSO function as we decided it was too big a security issue. Too many times teachers seem to leave their laptop open at the front of the room while they go helping people. It's too easy for a student to sneakily open it and do things with SSO enabled. That could be just our way of thinking, I suppose it depends on how your school runs things?

[Oaktech]

We trialed it for about 30 minutes before exactly the above happened and we turned it back off again.

[themightymrp]

Incidentally, I can't find a guide on the Advanced Learning site on how to set up SSO? Even in the forums I can't spot it?

[NickBuckel]

Hi Everyone,

 

There is a guide for SSO on the support site but its only available for people who have already purchased the add on which may explain why you weren't able to find it.

 

To answer the original question - when you set it up there's a screen where you can match ePortal logins to AD logins.

 

Nick

[NickBuckel]

If you have bought SSO you can get to the set up guide here:

 

https://www.advancedfirstline.com/advancedportal/kb.aspx?articleid=1499

 

Nick

[Diello]

If you login to the Support Portal and search the KB for "Single Sign On", the guide is the top hit.

 

We use it here, it requires a seperate license (of course!). You have to extend your AD schema which adds a CCM-PortalUsername and CCM-PortalPassword field to your users schema. You then configure AD under Server Settings on the Facility Controller, and match AD to ePortal accounts under Server --> Login Name Table --> Single Sign On logins.

 

As for the security side of things - It's a difficult balancing act - Security is only as good as the user, and they have access to a lot of information under their logins anyway, e-mails with confidential data, SharePoint with confidential data... At the end of the day, they have to be responsible professionals and protect the data they have access too, short of us forcing them to enter a password each and every time they want to access a peice of data, they have to take some responsibility. All they ever did before SSO was save the password in their browser anyway... you take that facility away, and they just tack it on a post-it note... Technology is not a panacea.

[Trapper]

Hi Nick @ Advanced

 

Do maintained Birmingham schools get the addon through BCC's subscription?

[NickBuckel]

@Trapper I don't think you get SSO as part of your subscription, but if you contact Link you should be able to get it added on or at least get a quote for how much it would cost.

 

Nick