Manage single sign-on

Overview

Single sign-on (SSO) allows users to access MyPowerHub and Unified User using their district credentials, reducing the need to manage multiple usernames and passwords.

District administrators can create, manage, and update SSO connections directly within the application. This self-service capability gives administrators greater control over authentication settings and reduces reliance on PowerSchool Support or Professional Services.

Key capabilities

• Manage SSO connections directly in MyPowerHub and Unified User.

• Support SSO for all MyPowerHub districts, including non–PowerSchool SIS districts.

• Renew SIS identity provider (IdP) connections when SIS credentials are updated or refreshed in test instances.

• Reduce the need for Support or Services involvement in SSO setup and maintenance.

Access

Select Admin and from District configurations, choose Manage single sign-on.

Verify your domain

1. Click Add domain.

2. Enter the domain

3. Click Add domain.

4. From the list of Domains, click Verify.

5. Copy the information to share with your DNS provider.

6. Click Verify domain.

Set up an SSO connection

1. Click Add connection.

2. Select a Connection type and then click Continue.

3. Set up the IdP.

   1. Select a System email domain. You must verify the domain before you can set up a connection.

   2. Select the applications to be routed automatically to this IdP. This will bypass the login screen and send users directly to the IdP for authentication.

   3. Enter Sign-in page button text for users who will not be sent directly to the IdP.

   4. Click Next.

4. Configure the connection.

   1. Enter the client ID and secret.

   2. Select an Expiration date.

   3. Click Next.

5. Test the connection.

   1. Click Test in new window.

   2. Indicate if the test was successful. If not successful, review the information for accuracy.

   3. Click Next.

6. Click Submit SSO connection.