Oliver: Entra ID SAML Authentication
Review the recorded approach to Oliver v5 single sign-on through the consolidated CCM enterprise app, and find the school-configuration and WONDE-mapping references.
Source-derived reference
These notes were recovered from OneNote. Configuration, permissions and operating results have not been freshly verified. Confirm the applicable authority and environment before acting.
Configuring Oliver v5 to use Azure AD (Entra ID) for authentication is described in a Softlink guide referenced by the source. That attachment remains held.
To minimise the proliferation of enterprise apps across schools however, much of the configuration documented in their guide has already been completed in a single consolidated Enterprise App.
All CCM Schools should use the single CCM: Oliver v5 SAML Auth enterprise app when enabling SSO for their Oliver instance.
IMPORTANT: There is no need for schools to create their own individual Enterprise App. Any school that is currently using a standalone Enterprise app for Oliver SSO should plan to migrate to the single CCM: Oliver v5 SAML Auth enterprise app as soon as possible, using instructions here. Adding Individual Schools to the CCM Enterprise App
To use the CCM enterprise app, and to ensure consistency across all schools, a standard configuration is required within Oliver. See the CCM Standard Configuration Requirements as per Oliver Standard Configuration (WONDE Sync)
The Oliver Logon flow is as follows.
- A user attempts to logon to Oliver and they are redirected to the CCM Schools Microsoft logon.
- The user logs on with their school email and password (and MFA if prompted).
- If Microsoft logon is successful the Unique User Identifier is passed to Oliver. For the standard configuration this is the users User Principal Name.
- Oliver matches the User Principal Name to the USERNAME field, and if matched the user is logged onto Oliver.
Attachment retained for review