ÉduConnect is the French national OIDC identity provider for primary and secondary students and parents signing into school portals (ENT). Authdog fronts it as a first-class enterprise OIDC connector, so one connection serves every ENT that federates through ÉduConnect.
Copy the redirect URI
In the Authdog console, select the project and environment, find ÉduConnect (the Federation filter is pre-selected by this link), and click Enable. Copy the redirect URI shown in the form:
https://identity.authdog.com/api/v1/callback/<connectionId>Register with ÉduConnect
ÉduConnect is operated by the French Ministry of Education. Access is provisioned for eligible ENT publishers and education partners, not self-served.
- Request a client from the ÉduConnect operator and sign the federation charter.
- Provide the redirect URI from Authdog as a registered redirect URI.
- The operator returns a Client ID, Client Secret, and the OIDC discovery URL of the ÉduConnect environment you were assigned (test, integration, or production).
Use the operator's documentation for the exact discovery URL and required scopes for the environment. ÉduConnect may require specific scopes and a acr values parameter for the level of assurance requested.
Configure Authdog
| Field | Value |
|---|---|
| Connection name | A label that identifies this ÉduConnect connection, e.g. educonnect-prod |
| OIDC discovery URL | The discovery document URL supplied by the ÉduConnect operator |
| Client ID | The client identifier issued by ÉduConnect |
| Client secret | The client secret issued by ÉduConnect |
| Scopes | openid profile email plus any ÉduConnect-required scopes |
| Email domains | The discovery domains that should route to this connection, e.g. ent-example.fr |
Save, then toggle the connection active.
What ÉduConnect returns
Authdog requests the openid profile email scopes (plus any required by ÉduConnect) and reads the normalized profile from the ID token and the userinfo endpoint. Claims include the stable subject, email, and the level of assurance requested from ÉduConnect.
Test it
- Open your environment's hosted sign-in page, or link to
https://identity.authdog.com/api/v1/signin/<connectionId>. - Select the ÉduConnect button and complete the flow on the operator's hosted page.
- Confirm the user appears under Users in the console with an ÉduConnect identity linked.
Troubleshooting
| Symptom | Cause |
|---|---|
invalid_client |
The client credentials do not match the ÉduConnect environment |
Invalid parameter: redirect_uri |
The URI registered with ÉduConnect does not match Authdog's exactly |
| Discovery document 404 | The discovery URL is not the ÉduConnect environment's discovery endpoint |
| Wrong user population | You pointed the connection at the test environment instead of production |
Related
| Read | To learn how to |
|---|---|
| Connectors | Set up any other social provider |
| Enterprise SSO | Connect any SAML or OIDC enterprise identity provider |