Kannu Admins - Setting Up Single Sign-On for Google, Facebook, GitHub and/or AuthO/Azure

You can configure your Kannu portal to include Single Sign-On (SSO), an authentication process that lets users log in using an account from a different site. Kannu currently supports single sign-on with Google, Facebook, and GitHub accounts. These are a great way to get users using your portal, since no password setup is required when they register.

On the Kannu side, all login options are configured in Admin>Configuration>Site Settings>Authentication Options. For anything other than email/password login, you'll need to create an "app" on the relevant site, and then enter your ID and secret key on Kannu to make the connection. Below you'll find guides on setting up SSO for each available website.

NOTE: If you set up SSO for your Kannu portal, we still recommend that you leave email/password login as an option, so as not to wall out learners who don't have accounts with whatever service you connect. There are certain exceptions to this: If you're confident all potential users will have accounts with the service, then you may not need to include email/password as an option. For instance, if your organization uses Google Apps for user emails, you can use just Google SSO since all users will have Google emails.

Google

1. Visit the Google API Console.
2. Click on “Enable APIs and Services”
   
3. Click on the Google+ API link
   
4. If prompted, click on “Create Project”. If you already have a project, you can select which one to use from the dropdown at the top of the screen.
   
   or
   
   • Wait until the project is completed (this may take a few minutes)
5. Click on “Enable” at the top of the screen.
   
6. Click on “Create Credentials”
   
7. Click on “client ID” to create an OAuth Client ID
   
8. Click on “Configure Consent Screen”
   
9. Fill out the fields with appropriate values, for the homepage, privacy policy, and terms of use fields you can use the following values:
   
   
10. Click Save
11. Select “Web Application” as the application type
    
12. Fill out the authorized domain fields with the following information:
    
13. Click “create.”
14. Copy the OAuth Client ID and Client Secret from the next screen. Paste those values into the appropriate fields in the authentication section of the admin settings for your Kannu site.
    
15. Click “Save” to save the settings.
16. Log out of your Kannu site and attempt to log in using your Google credentials.

Facebook

1. Go to Facebook Developers and log in with your account.
2. Select Add a New App from the dropdown in the upper right:
   
3. Provide a Display Name and Contact Email for your application.
   
4. On the Product Setup page that follows, click Get Started next to Facebook Login:
   
5. Select “Web” as the type of application. The Client OAuth settings for Facebook Login will appear.
   
6. Enter the following URL in the Valid OAuth redirect URIs field:
   • https://YOUR_KANNU_URL/auth/facebook/callback
7. Click Save Changes.
8. Click on App Review on the left navigation bar. Near the top of the page under "Make (Your App Name) App public?" click to move the slider to Yes.
   
9. Click Settings in the left nav. On this page you can retrieve your App ID and App Secret. Click on “Show” to reveal the App Secret.
   
10. Copy the App ID and App Secret and paste them into the appropriate fields on the Authentication options of the admin settings page for your Kannu Site.
    
11. Click “Save” to save the settings.
12. Log out of your Kannu site and attempt to log in using your Facebook credentials.

Github

1. Log in to Github (or create an account if you do not already have one)
2. In the upper-right corner of any page, click your profile photo, then click Settings.
   
3. In the left sidebar, click OAuth Apps.
   
4. Click Register a new application.
   
5. In "Application name", type the name of your app.
   
6. In "Homepage URL", type the full URL to your app's website.
   
7. In "Authorization callback URL", type the callback URL of your app.
   
8. Click Register application.
9. Copy the Client IDand Client Secret and paste them into the appropriate fields on the authentication section of the admin settings page on your Kannu site.
   
10. Click “Save” to save the settings.
11. Log out of your Kannu site and attempt to log in using your Github credentials.

AuthO

1. Log in to AuthO (or create an account if you do not already have one)
   1. If it's a new account, specify tenant domain. For example: youcompanyname.auth0.com. Make a note of this. Click Next
   2. In the next screen, enter some more details about your account and click on Create Account:                                                                                                  
2. In the left sidebar, click on Applications.
3. Click the Default App
4. Scroll down and find the 'Allowed Callback URLs" field and paste: https://YOUR_KANNU_URL/auth/auth0/callback(scroll down and save)
5. Copy "Domain", "Client ID" and "Client Secret" fields and paste them into the appropriate fields on the authentication selection of the admin settings page on your Kannu site.

Azure

1. Log in to Azure (or create an account if you do not already have one)
2. Scroll down and find the 'Allowed Callback URLs" field and paste: https://YOUR_KANNU_URL/auth/azure_activedirectory_v2/callback(scroll down and save)
3. Copy "Domain", "Client ID" and "Client Secret" fields and paste them into the appropriate fields on the authentication selection of the admin settings page on your Kannu site.