Merge pull request #223149 from v-hgampala/canvas-lms

Product Backlog Item 2222921: SaaS App Tutorial: Canvas Update

Author: 19BMG00

articles/active-directory/saas-apps/canvas-lms-tutorial.md

@@ -9,7 +9,7 @@ ms.service: active-directory
 ms.subservice: saas-app-tutorial
 ms.workload: identity
 ms.topic: tutorial
-ms.date: 11/21/2022
+ms.date: 01/06/2023
 ms.author: jeedes
 ---
 # Tutorial: Azure AD SSO integration with Canvas
@@ -80,17 +80,9 @@ Follow these steps to enable Azure AD SSO in the Azure portal.
     > [!NOTE]
     > These values are not real. Update these values with the actual Identifier and Sign on URL. Contact [Canvas Client support team](https://community.canvaslms.com/community/help) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
 
-5. In the **SAML Signing Certificate** section, click **Edit** button to open **SAML Signing Certificate** dialog.
+1. On the **Set up single sign-on with SAML** page, In the **SAML Signing Certificate** section, click copy button to copy **App Federation Metadata Url** and save it on your computer.
 
-    ![Edit SAML Signing Certificate](common/edit-certificate.png)
-
-6. In the **SAML Signing Certificate** section, copy the **THUMBPRINT** and save it on your computer.
-
-    ![Copy Thumbprint value](common/copy-thumbprint.png)
-
-7. On the **Set up Canvas** section, copy the appropriate URL(s) as per your requirement.
-
-    ![Copy configuration URLs](common/copy-configuration-urls.png)
+	![The Certificate download link](common/copy-metadataurl.png)
 
 ### Create an Azure AD test user
 
@@ -120,33 +112,18 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 
 1. In a different web browser window, log in to your Canvas company site as an administrator.
 
-2. Go to **Courses \> Managed Accounts \> Microsoft**.
-
-    ![Canvas](./media/canvas-lms-tutorial/course.png "Canvas")
-
-3. In the navigation pane on the left, select **Authentication**, and then click **Add New SAML Config**.
-
-    ![Authentication](./media/canvas-lms-tutorial/tools.png "Authentication")
-
-4. On the Current Integration page, perform the following steps:
-
-    ![Current Integration](./media/canvas-lms-tutorial/save.png "Current Integration")
+2. Go to **Admin > Microsoft OneNote > Authentication**.
+3. Choose an authentication service as **SAML**. 
 
-    a. In **IdP Entity ID** textbox, paste the value of **Azure Ad Identifier** which you have copied from Azure portal.
+    ![Canvas](./media/canvas-lms-tutorial/admin.png "Canvas")
 
-    b. In **Log On URL** textbox, paste the value of **Login URL** which you have copied from Azure portal .
+4. On the **Current Provider** page, perform the following steps:
 
-    c. In **Log Out URL** textbox, paste the value of **Logout URL** which you have copied from Azure portal.
+    ![Current Integration](./media/canvas-lms-tutorial/current-provider.png "Current Integration")
 
-    d. In **Change Password Link** textbox, paste the value of **Change Password URL** which you have copied from Azure portal.
+    a. In **IdP Metadata URI** textbox, paste the value of **App Federation Metadata URL** value, which you have copied from Azure portal.
 
-    e. In **Certificate Fingerprint** textbox, paste the **Thumbprint** value of certificate which you have copied from Azure portal.
-
-    f. From the **Login Attribute** list, select **NameID**.
-
-    g. From the **Identifier Format** list, select **emailAddress**.
-
-    h. Click **Save Authentication Settings**.
+    b. Click **Save**.
 
 ### Create Canvas test user
 
@@ -156,31 +133,19 @@ To enable Azure AD users to log in to Canvas, they must be provisioned into Canv
 
 1. Log in to your **Canvas** tenant.
 
-2. Go to **Courses \> Managed Accounts \> Microsoft**.
-
-   ![Canvas](./media/canvas-lms-tutorial/course.png "Canvas")
-
-3. Click **Users**.
+2. Go to **Admin > Microsoft OneNote > People**.
 
-   ![Screenshot shows Canvas menu with Users selected.](./media/canvas-lms-tutorial/user.png "Users")
+3. Click **+People**.
 
-4. Click **Add New User**.
+4. On the Add a New User dialog page, perform the following steps:
 
-   ![Screenshot shows the Add a new User button.](./media/canvas-lms-tutorial/add-user.png "Users")
-
-5. On the Add a New User dialog page, perform the following steps:
-
-   ![Add User](./media/canvas-lms-tutorial/name.png "Add User")
+   ![Add User](./media/canvas-lms-tutorial/new-user.png "Add User")
 
    a. In the **Full Name** textbox, enter the name of user like **BrittaSimon**.
 
    b. In the **Email** textbox, enter the email of user like **brittasimon\@contoso.com**.
 
-   c. In the **Login** textbox, enter the user’s Azure AD email address like **brittasimon\@contoso.com**.
-
-   d. Select **Email the user about this account creation**.
-
-   e. Click **Add User**.
+   c. Click **Add User**.
 
 > [!NOTE]
 > You can use any other Canvas user account creation tools or APIs provided by Canvas to provision Azure AD user accounts.
@@ -189,9 +154,9 @@ To enable Azure AD users to log in to Canvas, they must be provisioned into Canv
 
 In this section, you test your Azure AD single sign-on configuration with following options. 
 
-* Click on **Test this application** in Azure portal. This will redirect to Canvas Sign-on URL where you can initiate the login flow. 
+* Click on **Test this application** in Azure portal. This will redirect to Canvas Sign on URL where you can initiate the login flow. 
 
-* Go to Canvas Sign-on URL directly and initiate the login flow from there.
+* Go to Canvas Sign on URL directly and initiate the login flow from there.
 
 * You can use Microsoft My Apps. When you click the Canvas tile in the My Apps, you should be automatically signed in to the Canvas for which you set up the SSO. For more information about the My Apps, see [Introduction to the My Apps](https://support.microsoft.com/account-billing/sign-in-and-start-apps-from-the-my-apps-portal-2f3b1bae-0e5a-4a86-a33e-876fbd2a4510).