Classlink SAML Configuration

Set up Single Sign-On (SSO) for your school system using Classlink.

1. From the Launchpad side menu, select Single Sign On > SAML Console.
2. On the SAML Console page, select ADD NEW.
3. On the SAML settings page, enter the following details.
   • Name: Canva
   • Metadata: Copy this metadata text
   • Login URL: Leave this field blank
   • Icon URL: https://filescdn.classlink.com/resources/icons/default/Canva.png
4. Tick the Use custom certificate for signing? checkbox.
5. In the Attribute Mapping section, set up the attributes as shown below.

6. Save your settings.

Go to the Classlink SAML settings page and copy the following details. You’ll need these to complete the setup in Canva

• IDP Single Sign On Service URL
• Identity Provider Issuer
• Signing Certificate

1. Log in to your Canva account.
2. In the bottom-left corner, click your profile avatar, then select Settings.
3. From the side menu, click the SSO and provisioning tab.
4. Click Single sign-on (SSO) > Manage > Edit IdP metadata.
5. Enter your identity provider’s details in the three fields:

• SSO or login URL: Paste your IDP Single Sign On Service URL.
• Entity ID or Issuer URL: Paste your Identity Provider Issuer
• X.509 Public Certificate: Paste all of the contents from your Signing Certificate.

6. Click Save and next.

1. Go to Launchpad.
2. Select Management Console > Applications > Add.
3. On the Edit Application page, enter the following details.
   • Single Sign-On App: Toggle this to Yes
   • Type: Select SAML
   • Web Address: Paste your IDP Initiate Login URL. You can get this on your Classlink SAML settings page.

There are two easy ways to test your SSO setup:

If you're still on the Set up SSO page, scroll to the Test your SSO connection section and click Test SSO. If you're starting from the Canva homepage instead:

1. In the left-hand panel of your homepage, click the gear icon to open Settings.
2. From the side menu, click the SSO and provisioning tab.
3. Go to Single sign-on (SSO) > Manage > Test SSO.

1. Before logging out, go to the SSO and provisioning tab.
2. Click Single sign-on (SSO) > Manage > Configure SSO settings.
3. Set the login option to Optional for everyone.
4. Log out of your Canva account.
5. On the login page, click Continue with email, then select Log in with SSO.

Make sure to test using a student and teacher account. You’ve successfully configured SSO if:

• You logged in as a teacher and can see the People page.
• You logged in as a student and can’t see the People page.

Choose how you want people to log in. We recommend requiring SSO for everyone in your domain.

1. From the homepage, go to Settings > SSO and provisioning.
2. Click Single sign-on (SSO) > Manage > Configure SSO settings.
3. Select Required for everyone (domain capture).
4. Click Save changes.

For districts with a multi-school setup, you’ll need to transfer your roster data to Canva using OneRoster to help us identify which school a user should be assigned to.

Learn how to provision your school using OneRoster.