CUSTOMER STORYSan José Unified School District Saves Time,Speeds User Provisioning and New App Rollouts“OneLogin is a great product. We’re very happy with it.
The integration with SAML-enabled applications is, in myexperience, flawless.”
Patrick Scanlan
SUPERVISOR IN TECHNOLOGY AND DATA SERVICES,INDUSTRY
Education K–12

SAN JOSÉ UNIFIED SCHOOL DISTRICT

Because students move all the time—leaving classes, entering newclasses, while substitute teachers come and go, the Technology and Data

USERS
36,000—33,000 students, 3,000
faculty and staff at over 40 sites

Services department at the San José Unified School District (SJUSD) isaccustomed to change.

TOP CLOUD APPS

Serving more than 35,000 students, faculty and staff in Northern

Box, Google Apps, Qualtrics,Clever, Envoy, Web Help Desk,Google Classroom

California’s largest city, the department manages almost dailychanges to faculty and student rosters.
“In a school environment, you have a large percentage of users leaving
every single year. All of a sudden you just lose 3,000 users, and thenadd another 3,000 a few months later. It doesn’t happen in any otherorganization,” says Patrick Scanlan, Supervisor in Technology andCHALLENGE
Frequent, massive turnover ofstudents and faculty substitutes
Low level of familiarity withtechnology
Managing users with no email
address

Data Services at SJUSD.

SOLUTION

CHALLENGE

Automated onboarding andprovisioning

When SJUSD transitioned to Microsoft Outlook, it lost its file storage

Ease of integration with SAML
and forms for key apps

option, which offered messaging and collaboration, but on an outdated
platform. So the district started its search for a cloud storage file sharing

Custom branded portal for UX,
support self-help

platform that would allow collaboration.
“Because we’re a school district, we have a daily issue with many users
about managing or even remembering usernames and passwords. So we
needed something that was completely deployable from the admin side,
based on what’s already in our directory,” says Scanlan.

RESULTS
Saves IT time, ease of integration
Fast rollout and onboarding of
new apps
Reduced user management forusernames and passwords
Intuitive UX allows faculty andstudents to focus on learning

“The hardest part is managing user accounts. With as many staff andstudents as we have, provisioning users ahead of time was definitely arequirement,” states Scanlan. It needed to integrate with Active Directory(AD), and to create student user accounts without an email. Students
are given logins, and access to online platforms, but they do not havea district-provided email account.

SOLUTION“The District chose Box as the storage solution, because they had theenterprise tools and the back-end admin capabilities that we neededto manage an organization of our size. And when it came to user

ONELOGIN + BOX

provisioning, Box suggested OneLogin as the solution for that,”“When it came to user provisioning, Box

says Scanlan.

suggested OneLogin as the solution for

Leveraging the robust provisioning integration between OneLogin andThe District chose Box as its storage

Box, SJUSD set up rules for users and groups based on AD user fields

that,” says Scanlan.

solution, because they had the enterprise
tools and the back-end admin capabilities

such as grade level and site location as well as custom attributes, thenSJUSD needed to manage an organization

utilizes mappings to automate app access. This helped streamline theof its size. SJUSD also liked Box because

provisioning process, while end users benefit from the simplicity of asingle app portal. “As we used OneLogin more and more, from the adminside, we really liked the features we saw. We wanted a single sign-on
portal for our users, where they could see all of the applications
available to them, and they could just click,” comments Scanlan.

it is platform agnostic, respects native fileformats, and Box accounts don’t require afunctional email.
The District does not provide students
with an email account. Provisioning users
was a critical factor, because there is dailyuser turnover, with large numbers being

When staff and students are loaded into the student information systemremoved at the end of the school year, andor HR system, their user accounts are created in AD, then additional

added at the beginning of the next.

accounts are created based on that. When a new staff member is set up

Box was SJUSD’S first SAML application.

in HR, their AD account gets created automatically, which in turnThe use of OneLogin grew organicallyprovisions their Box account, all through OneLogin. This all happens
securely and instantaneously via Active Directory Connector (ADC)change notifications. Students all have Box accounts, as well as Google
accounts for Drive and Classroom, which are all preloaded in their
OneLogin accounts. Other cloud apps at SJUSD include Qualtrics,
Web Help Desk and Envoy.

RESULTS“The impact with OneLogin has been a lot less user and password
management. The greatest compliment I can give Is that the use of thisproduct and its features, and how easy it is to integrate, has given people
in my department more of their time back to take care of other moreinteresting and productive things. The fact that we’re not managing
users any more at the lower levels is amazing,” says Scanlan.

O N E LO G I N . C O Mfrom a single application SAML solution,and delivers true Active Directory (AD)integration to provision user accounts.

SAML Saves“Deploying a new SAML-based app takes less than an hour to get theconnections set up both ways. For apps that don’t support SAML yet, westill were able to find a solution. OneLogin has an extensive form-filling
tool that enables us to create a connector for login pages or productsthat don’t support back-end directory syncing features yet. That has
been a godsend, too,” states Scanlan.
“When we’re choosing a new program, and that department comes andasks, ‘Should we choose this product?’ one of our first questions is, ‘Does
it integrate with Active Directory or do they have SAML support?’ If theanswer is, ‘No,’ then we tell them they’re going to take on a huge amountof work, managing usernames and passwords with manually-uploaded
spreadsheets,” advises Scanlan.
“OneLogin is a great product. We’re very, very happy with it. The
integration with SAML-enabled applications is, in my experience, flawless.
We only have five or six SAML-enabled apps right now, but for those that
get used a lot, it’s a saving grace for us,” comments Scanlan.

“Our department can’t
appreciate anything morewhen it comes to choosing aOnboarding New Apps

product, when our end users“Our job is helping people who aren’t comfortable with technology

tell us that they like that

actually try some of these really cool things that we have, and OneLoginproduct. They think it’s easy

is one of those new cool things that we’re trying to get people to use.
One of the biggest benefits we’ve seen is the ability to test out or
onboard new programs. It’s so much easier than it used to be. Because
OneLogin has a fully-developed web connector, we can make a login
work, and support new app pilots. We build it, create a group or a rolein OneLogin, give them access, then they try it. If it doesn’t work out,
it’s easy for us to pull the tile away and we’re done. If they decide topurchase it and fully roll it out, we use the same solution,” says Scanlan.
“Security is another benefit, knowing that our users have something thatis fully encrypted, tied to our directory, and it’s safe,” comments Scanlan.
Customization, Admin Control and Self-Service“Customized branding has really helped our ability to fully brand ourportal and support our users. Our login page help links take them to us,
the email link goes to our support help desk. We’re able to help our users
get access themselves—before they contact the help desk. They’re able
to solve their own problem before requesting help. With the OneLoginplatform, all of that is within our control,” states Scanlan.
“With some vendors, we have to fight for a single error message on thelogin page to instruct users who get stuck. Because otherwise, they have
nowhere to go, and no clue. We can go into our admin console, we canO N E LO G I N . C O M

to use, and it always works.”

customize all of that on our own—we don’t have to call anybody, wedon’t have to send an email, we don’t have to do any of that. It’s
dead nuts simple,” comments Scanlan.
“Our user feedback on OneLogin has been that it’s easy to use. Ourdepartment can’t appreciate anything more when it comes to choosing
a product, when our end users tell us that they like that product. They
think it’s easy to use, and it always works,” says Scanlan.

About OneLogin, Inc
OneLogin brings speed and integrity to the modern enterprise with anaward-winning SSO and identity management platform. Our portfolioof solutions secure connections across all users, all devices, and every
application, helping enterprises drive new levels of business integrity
and operational velocity across their entire app portfolios. The choicefor innovators of all sizes such as Condé Nast, Pinterest and Steelcase,
OneLogin manages and secures millions of identities around the globe.

O N E LO G I N . C O M