nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

When will OAuth 2.0 be available for OneRoster?

Tasia Weatherly

I seem to recall a comment on a thread (that I can no longer find) that Blackbaud would implement OAuth 2.0 for OneRoster in a summer release. Is there any additional information/update on this? We are unable to move forward with a new Active Directory integration until Blackbaud supports OneRoster integrations with OAuth 2.

Find more posts tagged with

LTI OneRoster

Comments

Nick Marchese

I'm also extremely interested in this! I feel as though I may have posted something about this somewhere at some point, but now I'm following this!

Stephen Boyle

The API team is actively working on the OneRoster update to OAuth 2.0. I don't have a better target delivery date commitment than “by the end of Q2”, but I do expected it earlier than that. In any case, rest assured it is on the way.

Brian Hoyt

Search for posts and ideas from me (except the ones that got deleted for some reason) such as OneRoster complaint Grade Translations in export - Blackbaud Community dating back years asking for this. I truly hope that after so long of Lucy pulling the football away from me we might finally get there. The post you mention is in that thread.

Maybe it gets mentioned in roadmap meeting today?

Tasia Weatherly

Thanks Stephen! What is the end date of quarter 2? We are hoping we can implement our new Active Directory integration before the start of the 22-23 school year.

Stephen Boyle

End of Q2 is June 30, so that hopefully fits with your efforts for getting set up for the next school year.

Tim Kramar

Stephen Boyle:
End of Q2 is June 30, so that hopefully fits with your efforts for getting set up for the next school year.

After that last update from Angie in February and not hearing anything significant since then, I was skeptical. Still am, but with a little more hope.

Tasia Weatherly

Hi Stephen! Do you think the team is still on track to complete this by the end of Q2?

Stephen Boyle

As of now, yes. We are still on track. I will keep you posted when it finally hits a build, too.

Stephen Boyle

I wanted to keep everyone up to date on OAuth 2.0 for OneRoster:
We slipped a few days, so our release target is now 7/5.

Stephen Boyle

OAuth 2.0 is now testing in production. The holiday, vacations and real life played a bit of havoc with my plans to fully release it to everyone and we missed this week's release. So close, but yet it still pushes us a week.

Alex Basiliere

@Stephen Boyle
Hello Stephen,

Since Blackbaud will now be compatible with system using OAuth 2.0 security protocol. Will LTI Roster be able to be connected with Microsoft School Data Sync for Roster syncs/updates between Microsoft O365 Systems(Azure, Teams) and the Blackbaud Education Management Roster Data? And if so, what data will be able to be synced between the two systems successfully?

Thank You,

Tech Alex

Stephen Boyle

@Tasia Weatherly

As of the 7/12 release, OneRoster Settings now create OAuth 2.0 authenticated connections. Yay!

Tasia Weatherly

@Stephen Boyle Great! Thank you so much for letting us know!

Stephen Boyle

@Alex Basiliere
There are some additional OneRoster endpoints needed for MS SDS, which we are currently in development and should be done in the next few weeks. So, at that point, connecting BEM and MS SDS via OneRoster will be completely supported.

Andy Cupit

@Stephen Boyle This is great news about the connection with MS. Our school year begins on August 5th. Will the timeline meet that or should I try to make another arrangement?

Tasia Weatherly

@Stephen Boyle What should the OAuth 2.0 token URL be? Has that updated documentation been released yet?

Tim Kramar

@Stephen Boyle:
@Alex Basiliere
There are some additional OneRoster endpoints needed for MS SDS, which we are currently in development and should be done in the next few weeks. So, at that point, connecting BEM and MS SDS via OneRoster will be completely supported.

In SDS for the OneRoster API it prompts to select a provider. We should look for Blackbaud on the list in the next few weeks?

Stephen Boyle

@Andy Cupit
There is an optional demographics endpoint that will not be done by then, but the other endpoints referenced on the MS SDS→OneRoster API Guidelines page SHOULD be ready - the current target is 8/2. Though as with the work referenced in this thread, sometimes conflicts interfere.

Stephen Boyle

@Tim Kramar
Getting listed on the MS SDS provider list is coming soon. This is really our side of the work needed to follow there certification guidance. This work releases the required code in our product. So, the integrations will work, but we won't be official with MS until we run through the certification steps.

Nick Marchese

@Stephen Boyle Will there be updated documentation made available for what else this impacts? For example, I imagine this will help some of the more reluctant vendors claiming that the OneRoster integration or OAuth isn't robust enough. I may be way off on my understanding of how this will impact the marketplace.

Stephen Boyle

@Tasia Weatherly
The URL is the same for all the SKY APIs and can be found here, SKY API Authorization. The token url would be “https://oauth2.sky.blackbaud.com/token”

Tracy Brown

@Stephen Boyle How is the 8/2 date looking?

Stephen Boyle

@Tracy Brown
OneRoster Settings in BEM > Core > Integration Settings currently support OAuth 2.0 authentication by default. There is an option to create legacy 1.0 connections, but by default 2.0 is used.

Tim Kramar

@Stephen Boyle
But does that allow for the integration with SDS? I think that's what most of us are concerned about?

Stephen Boyle

@Tim Kramar
Ah. Got it.

All required MS SDS/GS endpoints but one, getEnrollmentsForSchool (/schools/{school_id}/enrollments) are currently supported. And that one is slated to be complete by 8/2. It isn't completed yet, but it's on track.

Tim Kramar

@Stephen Boyle
Awesome. Personally, I'm holding out a bit longer on doing a sync through SDS for this functionality.

Austin Ewachiw

@Stephen Boyle

We start after labor day, so I would be ECSTATIC to see progress on this by mid August. If you need any pilot schools for setup and testing, please call. Our SDS integration over the past few years (manual OneRoster Exports) has been priceless for online instruction with Teams. Anything to improve it will be HUGE. 2 Way with BB would be plus. I worked with Angie with a lot of this and I am glad to see Stephen is carrying the torch.

Jesse Barker

@Stephen Boyle
How do we connect Microsoft School Data Sync to this? I don't see Blackbaud as a provider

Stephen Boyle

@Jesse Barker
You need to set up a OneRoster Connection in Core > Settings > Integration settings. That will get you the Key and Secret for use in MS SDS. You can get into specifics of authorizing OneRoster with these Authorization instructions. I haven't done this process myself with SDS, but hopefully that will get you further.

We are working on getting listed with MS as a provider. We do support OneRoster, which is what SDS relies on, so it should be official relatively soon.

Tracy Brown

@Stephen Boyle What I am looking for and think others as well is Blackbaud being listed as a provider in the SDS API setup. That is what I was hoping would show up today, but I assume it is still not ready, or I am totally off base in what was planned for delivery on 8/2? Thanks.