Google Classroom Integration CiU

Introduction

This document will walk you through setting up your Christ in Us integration with Google Classroom. These instructions require Admin access to the Google Organization for the students and teachers using Christ in Us.  Before you start, please check you meet the following prerequisites:

  • You have admin rights to your Google Admin console and Developer console.
  • Christ in Us has been purged of previous school years’ users and data. Click here for more information.
  • Your Christ in Us administrator account is set up with your Google Org Email address as your username.

Section 1 - Single Sign-On App Setup

  1. Go to http://admin.google.com
  2. Click the Apps tile. 
    		3.
  3. Click the SAML Apps tile. 
    If a message pops up stating, “App management is moving,” click the “Got It” option.
    		4.


  4. Click “Add App" and select "Add custom SAML app."
    		5.
  5. Enter the application name. We recommend Christ in Us. You can add an icon image and click here to download the file.
  6. Click the “Download Metadata” button. In Section 3, you will upload this file to Christ in Us.
  7. In the Service Provider Details, enter the following: On the Attribute Mapping screen, click Finish.
    8. ACS URL:
    https://christinus.com/saml20/acs.html
    Entity ID: https://www.christinus.com
    Start URL:   Leave this Blank
    Signed Response: Check this box
    Name ID Format: EMAIL
    Name ID: Select the “Basic information and Primary Email” option.
    Click Continue
  8. On the Attribute Mapping screen, click Finish.
  9. Click “User access.”
    		10.
  10. Change Service status to “On for everyone.”
    		11.

Section 2 - API Client ID and Secret Setup

  1. Go to the address https://console.cloud.google.com and log in.
  2. Click the Project button.
    3. The label of the button will be specific to your organization.
  3. Click New Project.

    4. The Select From label will be specific to your organization.

    If you do not see an Organization or Location in step 4 below, please visit https://cloud.google.com/resource-manager/docs/creating-managing-organization for more information.

  4. Give your project a name. We recommend ChristinUsRoster.
    5. Review the Organization and Location for accuracy. These are generally the organization’s domain.
    Click Create.
  5. Make sure the new Project appears in the menu.
    		6.

  6. Go to the Library
    		7.

  7. Search “Classroom” in the search bar.
    8. Click the Google Classroom API result.

    Click the Enable button. 
  8. Return to the library(see Section 2, Step 6 for navigation).

    9. Search “Admin” in the search bar.

    Click the Admin SDK result.

    Click the Enable button.

  9. Go to the OAuth consent screen.
    		10.
  10. Set the User Type to Internal.

    11. Click Create.
    APP Information

  11. For App name, we recommend Christ in Us.

    Choose a support email address from your list.  This address is specific to email addresses associated with your org.

    Upload the ChristinUs Logo file emailed to you or download it here.
    		12.
    App Domain

  12. Enter the following:
    13.    a. Application home page:
    https://christinus.com/home.html
       b. Application privacy policy link:
    https://christinus.com/privacypolicy.html
       c. Application terms of service link:
    https://christinus.com/termsandconditions.html
    Authorized Domains

  13. Click the + Add Domain button and enter christinus.com.
    		14.
    Developer Contact

  14. Enter your email address and others you want to be notified if changes are made to this application in your Google Org.
    15. Click Save and Continue


    Scopes

  15. Click Add or Remove Scopes
    		16.
  16. Make sure all scopes are listed by changing the default list view from 10 to 100. Click the box at the top of the table to select all scopes.


    Click the Update button and then the Save and Continue button.
    		17.
  17. Go to Credentials
    		18.
  18. Click + Create Credentials and select OAuth client ID.
    		19.

  19. Select Web Application from the Application Type menu.
    		20.
  20. Enter a name. We recommend ChristinUsGC.
    		21.
  21. Click the Add URI button.
    22. It is the second Add URI button on the page.
  22. Enter https://christinus.com/google-classroom-redirect-login.html
    23. If you receive a failed message, try typing the entire address manually.

    Click Create and OK on the pop-up to confirm.
  23. Under OAuth 2.0 Client IDs, click the download icon.


    24. Then click the copy icon to the left of the download icon. In section 3, you will need to paste this information. If you cannot move on to Section 3 and want to return later, please paste the Client ID somewhere you can access it when you return to complete Section 3, step 7.

       

Section 3 - Configure New App Security

You will need the copied Client ID from Section 2, step 23.

  1. Return to the Admin Console at https://admin.google.com/.

  2. Click on the Security tile.
    		3.


  3. Scroll to the bottom of the page and click on the API Controls tile.
    		4.


  4. Click the Manage Third-Party APP Access link.
    		5.

  5. Click the + Add a Filter button and select App Name. Enter "ChristinUs" (without the quotation marks) for the search and click the Apply button.

    If you find the app listed, skip to Section 4. If it is not found, continue in this section with step 6.
    		6.


  6. Click Configure New App and select  OAuth App Name or Client ID,
    		7.


  7. In the search, past the Client ID obtained in Section 2, step 23. Click the Search button.
    		8.


  8. Select the Sadlier App using the Select button that appears to the right when you mouse over it.
    		9.


  9. Check the box next to the Client ID and then the Select button in the lower right corner.
    		10.


  10. Select Trusted and clicked the Configure button.
    		11.


Section 4 - Enabling SSO in Christ in Us

  1. Log in to christinus.com with your Admin Account.
  2. Click the Click the menu button in the top left corner. Select Settings and choose Manage Google Classroom.
    		3.

  3. Change the status from Disabled to Enabled.
    		4.
    Under Setup, select “Enable Single Sign-on and Rostering” on the right.

  4. Click Choose File on the left. Upload the file you downloaded in section 1, step 6, named GoogleIDPMetadata by default.
    		5.
  5. Click Choose File on the right. Upload the JSON file downloaded in section 2, step 30 with client_secret in the name. Click Save.
    		6.
  6. Click the menu button in the top left corner. Select Settings and choose Manage Administrators.

  7. If your username is not your Google Org email address, click the ellipsis button under Actions and select Edit Account from the options. Edit the Username to be your Google organization email address.
    		8.

  8. At the top of the screen, click the down arrow next to your name to log out.
    		9.

Testing the App

We recommend testing the login from the Google App Menu using an incognito window.
The keyboard shortcuts to open an Incognito window are: 

Windows, Linux, or Chrome OS: Press Ctrl + Shift + n. 

Mac: Press ⌘ + Shift + n.

Go to the Google Waffle App Menu. You can find it on any Google website in the top right corner next to your user account icon.
The Christ in Us icon looks like the icon shown on the right.

You will land on the Christ in Us home page and not be prompted to log in.

Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.