Request Single Sign-On Integration Assistance

Who is the Audience for this Service?

This service is intended for faculty and staff.

What is this Service?

Ithaca College provides Single Sign-On¹ capabilities through integration with various College systems via SAML2⁴ capable Identity Provider (IDP⁵) hosted by Microsoft Azure.  We also have a legacy Shibboleth³ environment which integrates our IDP⁵ metadata⁶ with the InCommon Federation 

Documentation for enabling an enterprise application sso with Azure Active Directory.

If you would like to set up Single Sign-on integration² for your application please open a tdx service request by contacting the service desk and assign it to the Single Sign-on¹ group. 

Glossary

1. Single Sign-on
   • A service which allows Ithaca College users to log into an application or website with their Ithaca College credentials and DUO authentication.
2. Single Sign-on Integration
   • The process of adding an application or website to our single-sign on service, which allows Ithaca College users to log into the application or website with their Ithaca College credentials and DUO authentication.
3. Shibboleth
   • One of our sign in services. Shibboleth will prompt a user for their username and password and then prompt for a DUO push. Shibboleth is notably used to sign into places like HomerConnect.
4. SAML2
   • "Security Assertion Markup Language". A language that is a standardized way to tell external applications and services that a user is who they say they are
5. IDP
   • Identity Provider. a service that stores and verifies user identity
6. Metadata
   • data that provides information about other data, but not the content of the data itself, such as the text of a message or the image itself.