Say 👋 hello to BusyBee, your AI-powered learning & teaching companion for Buzz. Learn more!
SAML authentication can be used to establish a secure single sign-on (SSO) connection between Buzz and ClassLink.
This process requires gathering and providing information from and to both systems, so it's easiest to do with each system open.
This article covers how to configure your Buzz/ClassLink SAML SSO:
- In ClassLink: Copy template and IDP metadata URL
- In Buzz: Provide ClassLink metadata and copy Buzz metadata URL
- In ClassLink: Paste Buzz metadata URL
- In ClassLink: Configure Launchpad SAML
Refer to this ClassLink article for additional help.
1. In ClassLink: Copy template and IDP metadata URL
You need to access your SAML console page in the ClassLink Management console:
- Click Single Sign-on.
- Select SAML Console.
- Click Copy existing in the top menu.
- In the search field, search for Agilix Buzz.
- Click Copy to add the Agilix Buzz SAML connector to your list of applications.
- In the search field, search for Agilix Buzz, again.
- Click the clipboard icon to copy your school system's unique IDP Metadata URL and save it.
- While on this page, click the arrow next to the IDP Metadata URL and click Copy IDP Initiate Login URL. Save this URL as you will need it later to configure the Launchpad SAML.
- Paste the IDP Metadata URL into a browser window and save the page as an XML file. This file is the metadata you need to configure Buzz.
2. In Buzz: Provide ClassLink metadata and copy Buzz metadata URL
In your Buzz admin app:
- Open the vertical menu in the toolbar of Domain Details and select Domain Settings.
- On the Authentication card, select SAML as your authentication Type. Do not choose the "old version" of SAML.
- Click Add identity provider (IdP).
- Provide the Login prompt. This is what appears on the login button. If you have only one IdP, this defaults to Login, if you have more, you can label them appropriately.
- Upload the idp-meta XML file that you created from the ClassLink URL.
- The Metadata resource path and Provider ID are automatically populated.
- Click Done.
- Provide a Logout redirect URL if you want users to be taken to somewhere other than the Buzz login screen when they sign out.
- Indicate if you want to Prevent users from using Buzz credentials.
- If you don't select this, you have the option to Allow users to create their own accounts rather than requiring they be created for them. You will also be able to set up your password policy.
- Right click the Download metadata button and choose Copy link address. This is the Buzz metadata URL you need to provide to ClassLink.
-
Note: You can also generate this URL on your own by adding your Buzz userspace to the correct place in the following URL:
https://api.agilixbuzz.com/SAML/[INSERT
USERSPACE]/metadata.xml
-
Note: You can also generate this URL on your own by adding your Buzz userspace to the correct place in the following URL:
- Save.
3. In ClassLink: Paste Buzz metadata URL
Return to the ClassLink SAML Console you were using above:
- Click the three dots next to the Agilix Buzz app to expand the menu.
- Select Edit.
- The field on the top right of your screen should be labeled Metadata URL.
- If it is labeled as only Metadata, click the metadata url link underneath it.
- If it is labeled Metadata URL, do nothing and continue to Step 4.
- Paste the Buzz metadata URL you copied above in the Metadata URL field.
- In the Login URL field, input your LaunchPad custom Login URL (Step 4 in this ClassLink doc describes how to find this).
- Click Update.
4. In ClassLink: Configure Launchpad SAML
- Open Launchpad and select Management Console > Applications > Add.
- In Edit Application:
- Single Sign-On App: Yes
- Type: SAML
- Web Address: Paste the IDP Initiate Login URL you copied in Step 8 of Part 1.
- Save.