Skip to main content
All CollectionsSchool administratorsInstallation and integrations
Single Sign-on methods
Single Sign-on methods

Integrate with Office 365, Google Apps, RM Unify or Active Directory for a unified login experience.

Konstantina avatar
Written by Konstantina
Updated over 2 months ago

Single Sign-On authentication enables your students and staff to get logged into Satchel using the login credentials that they are already accustomed to. Logging in using a Single Sign-On method eliminates the need for maintaining and distributing a new set of login details, making our platform easier to implement. 

You can enable, disable, and amend your SSO settings by going to Admin > Settings > Single Sign-On.

We integrate with:

Active Directory (LDAP)

To integrate with Active Directory, we need to be able to connect to your server, and identify users based on either: email address or MIS ID.

  1. Set up a bind user for Satchel with read-only access to the relevant OUs

  2. Authorise our IP address to connect to the Active Directory server: 52.18.135.12

  3. Go Admin > Settings > Single Sign-On.

  4. Enable Active Directory

  5. Select which user type (Students, Staff) will be using this login method.

  6. Enter the following details:

    • IP address of your AD server

    • Port (e.g. 636). Enable SSL if using this protocol.

    • The details of the bind user you created in step 1.

    • LDAP base e.g. ou=teachers,dc=school,dc=com|ou=students,dc=school,dc=com

    • AD attribute used for usernames, typically sAMAccountName

    • AD attribute used for emails, typically mail
      - OR -
      AD attribute used to store MIS IDs, e.g. customfield01

If you decide to map users with their email, please ensure the emails addresses are up-to-date on both your Active Directory server and our platform.
Related article: Update emails.

If you prefer to map users with their MIS ID, Satchel One will already have these imported from your MIS. You can then create a new, custom attribute in AD or repurpose an existing field that you are not currently using. You will also need to ensure that the MIS IDs are populated, manually or via an automated process, for new users that join the school.

Once your settings have been updated, users will be able to login using their school username and password.
​

Google

In order for users to log in with Google Single Sign-On, we simply need to ensure that we have their correct Google email address on file.

  1. Go Admin > Settings > Single Sign-On.

  2. Enable Google

  3. Select which user type (Students, Staff) will be using this login method.

  4. Update emails to ensure none are missing or incorrect.

Once the emails have been updated, you will just need to select the Sign in with Google option on our login page. If you are already signed in to your Google account, you will be taken straight through to your Satchel account. Otherwise, you will be prompted to enter your Google email and password first.
​ 

Office 365 (Microsoft)

In order for users to log in with Office 365, we simply need to ensure that we have their correct Office 365 email address on file. 

  1. Go Admin > Settings > Single Sign-On.

  2. Enable Office 365

  3. Select which user type (Students, Staff) will be using this login method.

  4. Update emails to ensure none are missing or incorrect.

Once the emails have been updated, you will just need to press the Sign in with Office 365 button on our login page. If you are already signed in to your Office365 account, you will be taken straight through to your Satchel account. Otherwise, you will be prompted to enter your O365 email and password first.
​

RM Unify

Install the Satchel One RM Unify app in order to access our website from your RM launchpad. Alternatively, you can use the RM Unify button on our website or mobile app.

  1. First, check that users in RM Unify is MIS Synced and Matched. You can do this by visiting your RM management console as an administrator and clicking on the MIS Sync Settings tab.

  2. Then on our platform go to Admin > Settings > Single Sign-On.

  3. Enable RM Unify

  4. Select which user type (Students, Staff) will be using this login method.

  5. Update emails to ensure none are missing or incorrect.


💡 Please note, a user's role in RM Unify must match their account type in our system. For example, teaching staff must be marked as Teacher on both RM Unify and Satchel One.
​

🚩 Scottish schools usually use the RM Unify SSO with their Glow credentials. If any of your teachers work across two Satchel One schools, they can only use their Glow email and the above SSO for one school at a time. If you have any queries on this, please contact us.

Common Queries

Why set up Single Sign-On authentication? 

Single Sign-On authentication enables your students and staff to get logged into Satchel using the login credentials that they are already accustomed to. This eliminates the need for maintaining and distributing a new set of login details, making our product easier to implement and manage! 

Will we be able to use two Authentication methods simultaneously?

Certainly. You can use multiple SSO methods simultaneously.

Can users log on the mobile app using a Single Sign On method?

Absolutely! All Authentication methods outlined above are now also available on both the iOS and Android apps.
​

Can users still use their previous credentials to login?

Satchel credentials will still work for users who had previously had these set up, these can be entered via the normal login method. However with SSO enabled, they won't be able to change the password if they need to as the "password reset" emails will be disabled.
​

Contact support
Did this answer your question?