OneRoster Provisioning

Configure OneRoster to send your roster data to Canva.

1. Log in to the SIS (Student Information System).
2. Select Roster Server > Manage > Applications.
3. On the top corner, select the + Add button, then search for 'Canva Education'.
4. Select the + Add button next to 'Canva Education'.
5. Set up the data to be sent to Canva and enable the sync. We strongly recommend enabling a full permissions sync.

1. On the Roster Server Console, select Apps from the toolbar.
2. Select the gear icon to show more actions for the Canva Education app.
3. On the side menu, select API.
4. Go to the API Credentials tab.
5. Copy the following details. You’ll need these in the next step.

• Key
• Secret
• Webpage URL - You can get this by selecting Explore in API. Make sure to copy up to and include "/v1p1".

1. Log in to your Canva account.
2. On the homepage, select your account profile to open menu.
3. Choose
   gear icon .
4. From the side menu, select the
   SSO and provisioning tab.
5. Under Single Single Sign-On (SSO) section, click Manage.
6. Choose Configure Provisioning.
7. Under Provision Accounts for your team, select Add provisioning method.
8. Choose OneRoster.
9. Go to the Sync Roster with OneRoster section, and fill out the details.

In the Endpoint URL field, paste your Webpage URL.

Refer to the screenshot below for the access token URL formats.

In the API Key field, paste your Key. In the API Secret field, paste your Secret.

Turn on Enable Daily Sync and Test settings to test your configuration settings. If you get an error, here are some things to check:

• If you correctly copied the credentials
• If the app (plugin in your OneRoster data provider) is enabled
• If the Token url is correct
• If the endpoint is correct (for example, there shouldn’t be text after “v1p1”)

If you’ve made sure all of the above and the error persists, it could be an allowlist issue. Contact our Support Team so we can check our allowlist.

If there are no errors, select Save changes and then Sync now.

Syncing may take a few hours to finish. To check if the users have been added, go to the People page in Settings.

Once OneRoster provisioning is enabled, Canva will continuously sync user and membership changes based on what your OneRoster source sends. This includes updates such as:

• Adding users to schools/teams/brands
• Moving users between classes/groups
• Removing users from schools/teams/brands when they’re no longer returned in the roster data or are marked as inactive/deleted in the rostering source

OneRoster syncing can trigger removals when users are no longer present (or no longer eligible) in the rostering source. To help prevent large-scale removals during long school breaks, Canva uses a pause purge window.

Default pause purge window (US summer)

Note: This default pause purge window applies to US schools and districts only.

• May 30 – September 1 (recurs yearly)
• Times are in UTC, starting at 00:00 on each date
  • Window opens: May 30 00:00 UTC
  • Window closes: September 1 00:00 UTC

Canva supports the following roles: team admin, Teacher, aide, and student. Users assigned with a role that’s unsupported will not get provisioned in the syncs.

However, while we recognise the team admin role, this role can’t be assigned to users and will be assigned as a Teacher by default.