Configure school SSO and hand setup to IT

SSO is available only in GiveCampus production. It is not available in Sandbox and cannot be enabled there. This applies to WorkOS and legacy SAML.

Open authentication settings

An authorized school settings administrator can open School Dashboard → Settings → Authentication. The page is titled Authentication Settings. Work with your institution’s IT team and use the setup shown for your school.

WorkOS setup

If the page displays Configure SSO in WorkOS, select it and complete the identity-provider configuration in that portal. If it offers Set up Single Sign-On, follow the setup flow. If the page asks you to contact GiveCampus Support to provision SSO, contact Support first. If Hand off setup to your IT team appears, enter IT contact email and click Send setup invite (or Resend invite). The recipient can configure SSO without receiving general dashboard access. Keep the setup link private.

Configure the identity provider’s metadata, certificate and attribute mapping as requested. Confirm that the login identity matches the intended GiveCampus administrator account. An inherited SSO connection must be reviewed with Support before changing the school linkage.

Legacy SAML setup

If the page shows SAML Identity Provider, complete the applicable fields supplied by IT, including IDP Metadata Endpoint, entity ID, single sign-on URL, single log-out URL, Name Identifier Format and Certificate in PEM format. Click Save Authentication Settings.

Test before requiring SSO

Test sign-in using the institution’s production administrator login page before enabling Require Administrators to sign in with SAML or another required-SAML option. Save changes and verify the intended users can sign in. A saved certificate alone is not proof that login works. If a login fails, provide Support with the school, time and exact error; never send a password or private key.