Canvas supports authentication with a variety of third-party identity providers, which can be configured in the Canvas interface. Each provider requires the admin to set an attribute to be associated with the account, such as a user ID, email, or login. Currently supported integrations include Facebook, Github, LinkedIn, Twitter, Google Apps, Microsoft (Office 365), Clever, CAS, LDAP, OpenID, and SAML. Some providers require custom components for configuration. All providers support Single Sign On (SSO) authentication.

Third-party authentication providers can be used in addition to Canvas authentication.

User Credentials

Once a provider has been saved in Canvas, the provider’s authentication login credentials must be added to each Canvas user’s account through SIS CSV files or the Authentication Providers API. (Currently there is no support for adding user credentials through the Canvas interface.) Each authentication provider supports specifically recognized parameters; some providers may recognize additional parameters. Unrecognized parameters are not supported.

To get additional help about authentication systems, including Single Sign On (SSO) support, view the Authentication documents in the Canvas Community Admin Group.

Just In Time Provisioning

As part of the authentication process, admins can apply Just in Time Provisioning, which tells Canvas to automatically create a user's accounts if one does not already exist. Currently when a user logs in to Canvas using a third-party authentication system, Canvas searches users in the account looking for a matching user parameter for that service. If a matching parameter is not found, Canvas returns the user to the authentication provider portal with a message the user could not be found. When Just in Time Provisioning (JIT) is enabled, Canvas automatically creates the user using an ID that matches the username used with the authentication provider.

JIT provisioning must be configured via API for the specific authentication provider (see the Authentication Providers API). It does not need to be configured for individual users via API or SIS.

Federated Attributes

As a complement to JIT provisioning, all authentication providers support federated attributes. When users log into Canvas, more information beyond just ID is passed to Canvas, and that information is associated with their existing user accounts. More information can be found in the Authentication Providers API.

Before logging into MagicMarker, make sure you have downloaded the app from the App Store. You will need to know your institution's URL to access Canvas on your Android phone.

You can easily create and upload caption files when you add video content in the Rich Content Editor. The Rich Content Editor is used in features that support the editor (Announcements, Assignments, Discussions, Pages, Quizzes, or Syllabus).

This lesson only applies to creating captions for videos created or uploaded into Canvas. If you've created a video outside of Canvas that you want to share in your course, learn how to create captions for external videos.

If you have not yet created or uploaded your video, learn how to record a new video or upload an existing video.

Note: Users can view video captions in the Canvas by Instructure mobile app. However, iOS devices can only display captions in WebVTT format. If you use another format besides WebVTT, users on iOS devices will not be able to display the video captions.