GG4L SSO Process
To allow teachers and students to focus on learning rather than logging in multiple times into different apps, MagicBox has implemented Single Sign-On (SSO) with GG4L.Using this SSO capability, user roles like student, teacher, school admin, and district admin can seamlessly launch MagicBox from within the GG4L portal using OAuth 2.0 APIs. This allows school users to easily sign in without needing to enter/remember multiple sets of UserID/Password details.GG4L School Passport can behave as:1. SSO from GG4L into MagicBox:In this case, users will initiate SSO from the GG4L portal and GG4L will perform SSO. Once a student, teacher, or school/district admin has logged in to their GG4L portal, they can SSO into MagicBox from the MagicBox app on the GG4L app gallery, without any additional login.2. Embedded SSO engine for publisher login page: This allows school/district users to do the SSO via the "Login with School Passport" button on the MagicBox login page.When Publisher/District Admin has rostered all users from GG4L on to the MagicBox portal, using OneRoster 1.1, users can click on "Login with School Passport" button on the MagicBox login page.On clicking on "Login with School Passport," the system will redirect the user to the "GG4L Authentication" page by clicking the "Login with GG4L" button on the MagicBox login box. On the "GG4L Authentication" page, the user will need to log in with their GG4L credentials (Username and password). On the successful login, the GG4L system will redirect the user to the Magicbox platform. Magicbox will verify the oAuth2 request and will create the session for the user for 45 minutes. After the oAuth2 request verification, Magicbox will redirect the user to the home page (depending on user role) of the user.  Note: If a user is not rostered on MagicBox and tries to log in with GG4L, the user will be taken back to the MagicBox login page and they will receive an error message: “Your account does not exist. Please contact your Administrator".