Skip to main content

Single Sign-On (SSO)

What is the difference between the SSO URL and the Redirect URL?

The  SSO URL is the link users use to be redirected after they have signed out or if their session times out. This page must include login information.

The Redirect URL is used by Blackbaud during the authentication process and should not be used as the Resource Tile link.

Always use the SSO URL when creating Resource Board links. The layout for your SSO URL resembles a layout similar to this:  https://11451.myschooldemo.com/app/sso/auth/pickatime.  It is located in the Content menu under Additional Content Types, Links. To create the link, take the first portion from your Blackbaud URL and the second from your SSO link (See step 5, Core / Security, Authentication settings, SSO Settings).  

What should my SSO key look like?

The SSO Key is 88-characters. A common configuration issue occurs when extra characters are added after the ending “==”.

SSO Error Messages

What does “The integration with pickAtime is not set up correctly” mean?

This appears when you have added your vendor ID # to the end of the secret key (located in Global Setup / Business, Show Advanced Options, Single Sign On Options, Blackbaud). The secret key should be empty after the ==.

Note: The secret key should be empty after the == and have no more than 88 characters.

What does “Failed to get Blackbaud Account Information” mean?

Confirm that your SSO URL is created correctly. NOTE: Your SSO URL is not your redirect URL; the layout for your SSO URL resembles a layout similar to this:  https://11451.myschooldemo.com/app/sso/auth/pickatime.  It is located in the Content menu under Additional Content Types, Links. To create the link, take the first portion from your Blackbaud URL and the second from your SSO link (See step 5, Core / Security, Authentication settings, SSO Settings).  

If this information is correct, then check that you have entered an 88-character SSO Key.

What does "Failed to get Blackbaud user" mean?

This appears when pickAtime is not able to communicate with BB communication. Please check and confirm that the user exists in both systems, and if they do confirm that the User ID data matches, try again.

What does “Blackbaud user not found” mean?

pickAtime was unable to locate a matching user record.

Verify that:

  • The user has been imported into pickAtime.
  • The user exists in both systems.

  • The User ID matches in both systems.

What does “pickAtime user not found by Blackbaud userID” mean?

The Blackbaud User ID could not be matched to a corresponding Parent ID or Teacher ID in pickAtime.

Confirm that the same User ID exists in both systems.