This article describes the configuration steps required to connect your Carousel Platinum account to your Microsoft or Google account, to take advantage of Single Sign-On within your organisation.
Single Sign-On can be activated for Carousel Platinum accounts with MIS integration
Please check that the new subdomain student.carousel-learning.com is covered in your firewall and filter allow lists.
Wonde Permissions
- To enable SSO for students (as well as teachers), you first need to approve the 'student email' scope via Wonde. To do this, someone with Admin permissions for the school's Wonde portal will need to visit to the 'Permissions' section, toggle on the optional 'Student > Students contact details read > Students email read' permission and confirm/save the updated permissions.
- For SSO to work for students, student emails must be stored in your MIS against each student, and these emails must match the ones they use for SSO.
Single Sign-On with Microsoft
- In order to configure the Carousel app for your organisation, you will need to have the "Global Administrator" role in your Microsoft Azure account. If you are not a Microsoft administrator in your organisation, please forward these instructions to an administrator so that they can continue.
-
For teachers to use Single Sign-On the email address in Microsoft Entra ID and the school's MIS must match. The MIS email will sync to Carousel and allow verification of their Microsoft credentials.
Configuration
1. Access the Carousel Azure app via this link.
2. If you are already logged in as the Microsoft Azure administrator account, you can skip to step 3. If you are not yet logged in, you will see a dialog box similar to to the following. Sign in as instructed.
3. Once logged in, you will see a Permission Request similar to the following. Click Accept.
4. Once you've clicked accept you should be redirected back to the Carousel login screen. Please note that this does not yet mean that SSO is active for your organisation.
5. To complete SSO setup for your MAT or School, contact our helpdesk at help@carousel-learning.com and request Microsoft SSO activation for your MAT or School. Please only do this after completing steps 1-4 above and ensuring the optional Wonde scopes 'Student Contact details read' and 'Student email addresses read' have been approved in the Wonde portal.
Once SSO is enabled, your MAT/School's users will only be able to log on with SSO, and they will no longer need their old Carousel passwords.
Single Sign-On with Google
- In order to configure Single Sign-On with Google for your organisation, you will need to have the "Super Admin" role in your Google account, and/or be able to edit the "API Controls" area of your organisation's Google Admin account. If you do not have these permissions, please forward these instructions to an administrator with suitable permissions so that they can continue.
- For teachers to use Single Sign-On the email address in the Google Directory and the school's MIS must match. The MIS email will sync to Carousel and allow verification of the Google credentials.
Configuration
1. Access the "Configured Apps" area of the API Controls section of your Google Admin account via this link.
2. If you are already logged in to your Google Super Admin account, you can skip to step 3. If you are not yet logged in, sign in as instructed.
3. Once logged in, you will see an "Add app" dropdown similar to the following. Click the dropdown and select "OAuth App Name or Client ID" from the list.
4. In the box provided, enter "Carousel" as the app name and then click SEARCH and select the Carousel app:
You may also be prompted to select OAuth Client IDs. If this option appears for you, click the available checkbox and click SELECT:
5. Next you'll see a "Scope" screen. Select the scope of which org units the SSO integration should apply to and click CONTINUE. You may have the option to authorise for part or all of your organisation.
6. Finally select what "Access to Google Data" status you wish the app to have and click CONTINUE. We recommend using the "Trusted" option.
7. Select "Allowlist for exemption from API access blocks in context-aware access. Available only for apps added via OAuth client IDs."
Click CONTINUE and FINISH.
You should now see the Carousel app showing in your "Configured Apps" list in the Security > API Controls > App Access Control menu:
8. To complete SSO setup for your MAT or School, contact our helpdesk at help@carousel-learning.com and request Google SSO activation. Please only do this after completing the steps 1-7 above and ensuring the optional Wonde scopes 'Student Contact details read' and 'Student email addresses read' have been approved in the Wonde portal.
Once SSO is enabled, your School/MAT's users will only be able to log on with SSO.
Top Tip: When SSO is activated you can still login to Quizzes and Study Packs assigned to the Carousel Demo class using the Demo student's first name/last name.
Please contact our helpdesk at help@carousel-learning.com if you need any further advice with setting up Single Sign-On.
Comments
0 comments
Please sign in to leave a comment.