Troubleshooting errors in SSO for Canva websites
If you can't access a Canva Website protected by Single Sign-On (SSO) or you’re running into authentication issues after setting up, here are the most common issues and ways you could fix them.
The signed in user is not assigned to the application
What happened: The user trying to access the Canva Website doesn’t have access to the SAML app in your Identity Provider (IdP).
How to fix it:
- Assign users to your SAML app in your IdP. Follow the steps in Step 3: Set up a new SAML 2.0 app in your IdP (outside of Canva)
Remember that the “SSO for websites” app is unique for each protected domain, and separate from the main Canva login SSO application, which you may have already set up to enable SSO in Canva.
SSO has stopped working due to an expired certificate
What happened: The x.509 certificate used in your SAML configuration has expired.
How to fix it:
- Check your current certificate's expiration in your Identity Provider (IdP).
- If it's expired, generate a new one.
- In Canva, go to Organization settings, then select SSO for websites.
- Select the pencil icon next to your connection, and replace the certificate using the same steps as during initial setup.
The SAML settings are wrong
What happened: There may be a mismatch between Canva and your IdP configuration.
How to fix it:
- For Google Workspace (G Suite):
- Make sure the Signed Response checkbox is selected.
- For all providers:
- Make sure both the Response and Assertion are set to Signed.
- Re-copy and paste the ACS URL, Entity ID, and x.509 certificate from Canva into your IdP to ensure all values are correct.
Was this helpful?
Helpful
Unhelpful