For Schools

Connecting RapidIdentity SSO

You must be a RapidIdentity Administrator to complete the integration process.

RapidIdentity SSO is used for single sign-on. It will not sync people into an integration, so add it to an integration you already have.

Step 1: Attach RapidIdentity SSO to an Existing Integration

  1. In the Edlink dashboard, open the integration you want people to sign in to.
  2. Select SSO.
  3. Select Attach an SSO Provider.
  4. Choose your preferred data storage region.
  5. Select RapidIdentity SSO.
Create Source drawer with RapidIdentity SSO selected
Create the RapidIdentity SSO source

Step 2: Find Your Base URL

  1. In RapidIdentity, open the dropdown in the top left and select Configuration.
  2. Under security, select Identity Providers.
  3. Copy your Base URL and paste it into Edlink.
RapidIdentity Identity Provider Configuration with the Base URL
RapidIdentity Identity Providers Base URL

Step 3: Add a Federation Partner

  1. Select Federation Partners in the sidebar on the left.
  2. In the top right, select ADD FEDERATION PARTNER, then select OpenID Connect.
  3. Expand General and enter the application name for NAME.
  4. Under CALLBACK URLS, add the callback URL shown in Edlink.
  5. Select Save in the bottom right.
  6. Copy the Client ID and Client Secret into Edlink.
Create New OpenID Connect Partner in RapidIdentity
OpenID Connect federation partner

Step 4: Send Email as an Attribute

  1. Collapse the General section and expand Claim Attributes.
  2. Select Add Claim Attribute.
  3. Enter the following:
    • NAME: Email
    • CLAIM: email
    • CLAIM TYPE: String
    • ATTRIBUTE VALUE TYPE: LDAP
    • LDAP ATTRIBUTE: mail
    • Select SINGLE VALUED
  4. Select Add, then select Save in the bottom right.
Add Claim Attribute form with Email, email, String, LDAP, and mail
Email claim attribute

Step 5: Validate Your Configuration

Back in Edlink, select Validate Configuration. When validation succeeds, select Finish.

Well Done!

You're now finished. People can sign in to the application with RapidIdentity. Roster data still comes from the integration's existing data source.

Any Questions?

If you still have questions, please contact our support team and we'll get back to you within 24 business hours.