System IDP
This section only applies to Consortiums.
System IDP is a way of authenticating PowerSchool ERP users through the respective IDP. Users are defined at the System Environment level and can access multiple profiles across districts using the same login link, irrespective of Tenant IDPs.
System IDP User Types
There are two types of users that will log in to PowerSchool ERP using System IDP.
- System Administrator users have access to the Environment Maintenance page.
- Consortium users do not have the Environment Maintenance page option.
Version Requirements
- 20.11.38 or later
- 22.4.2 or later
Configure System IDP
- Click the circle with your initials in the toolbar.
- Select Environment Maintenance.
- In the Business Entities panel, select Set System IDP.
- On the System IDP Setup page enter the IDP details as defined.
System IDP Details
Unique Identification GUID is provided by PowerSchool. | |
ID | Entity ID |
Identity Provider Name | Enter one of the following as used by the district:
|
Client ID | Get this from IDP Provider. |
Client Secret | Get this from IDP Provider. |
Claim Identifier | Enter the applicable identifier for Single Sign-On services, matched to the Identity Provider Name:
|
Identity Provider URL | Enter one of the following URLs, matched to the Identity Provider Name:
|
Identity Provider Scopes | Enter the Identity Provider Scope, matched to the Identity Provider Name:
|
Redirect URI |
|
Define System Administrator Users
System Administrators are defined on the User Access page.
- Click the circle with your initials in the toolbar.
- Select Environment Maintenance.
- In the Other Catalog Information panel, select User Access.
- On the User Access page, enter the global identifier of the user.
- Click Save.
Define Consortium and Support Users
Consortium and Support users are defined on the Consortium User page.
- Click the circle with your initials in the toolbar.
- Select Environment Maintenance.
- In the Other Catalog Information panel, select Set System IDP.
- In the Additional Links panel, select Consortium User.
- In the Consortium User Access page, enter the global identifier of the user.
- Click Save.