Federated access to KLASSA

The KLASSA access solution enables non-municipal organizations to use their own Identity Provider (IdP) to authenticate users accessing KLASSA.

If you represent a Swedish municipality and want access to KLASSA, please refer to Federation för kommunal verksamhet.

Internetstiftelsen operates the federated infrastructure and manages the exchange and publication of SAML metadata. Adda is responsible for the KLASSA service and provides guidance on authorization, required attributes and necessary configuration of the organization’s IdP for the KLASSA Service Provider (SP).

The organization must have signed the applicable agreement for federated access to KLASSA before joining the access solution. This includes opting in via Skolfederation or Sambi. A signed Skolfederation or Sambi membership agreement does not in itself include access to KLASSA.

Connection process

Enabling access to KLASSA normally involves the following steps:

  1. Sign the applicable agreement for federated access to KLASSA.
  2. Prepare and validate your organization’s IdP metadata.
  3. Publish the metadata through the appropriate connection path (see Technical Metadata Connection Guide (Klassa)).
  4. Setup your IdP to consume the access solution metadata feed (see Production environment (Klassa))
  5. Configure your IdP for the KLASSA SP according to Adda’s guidance material.
  6. Ensure that the attributes and authorization information required by KLASSA are released.
  7. Test the login flow (see Adda's guidance material for link)

Publication of an IdP in the federation metadata does not, by itself, complete the connection to KLASSA.

Documentation

Federation policy

The Federation Policy for KLASSA defines the conditions for participation and the technical and trust-related requirements that apply to the access solution.

Technical Metadata Connection Guide

The Technical Metadata Connection Guide (Klassa) explains how to prepare, validate and publish SAML metadata. This is the main starting point for technical staff connecting an IdP.

Production environment

The Production environment (Klassa) page provides operational and implementation details, including the aggregated metadata feeds and signing certificate required for setup in your IdP

Adda’s KLASSA guidance

After connecting the IdP to the federated infrastructure, you must also configure it for the KLASSA SP.

Follow Adda’s Åtkomstvägledning för KLASSA 5 and Vägledning för administratörer av KLASSA 5, available on the KLASSA 5 guidance page.


  • No labels