Configure MPASSid User Directory

Here you can find instructions how to configure TrivoreID authentication to work with MPASSid. Configuring MPASSid itself is out scope of this document (only general requirements provided).

This configuration enables for using credentials at MPADDid to be used to sign in to Trivore ID.

Configure Trivore ID

First, select User Directories from main menu as shown below and click button Add directory.

You will be asked to select directory type. Select MPASSid.

Core settings

Configure necessary settings, including Name, Client ID and Client secret. Default Scope is chosen based on MPASSid documentation and should be left as-is.

Appropriate values for Client ID and Client secret depend on the service MPASSid service provider. MPASSid needs to be configured first before these values are available. You will need the Redirect URL (shown in picture) value when configuring MPASSid. Note that this value is different for every TrivoreID instance.

User information

After you have configured necessary core settings, you should review user attribute mappings. Default mappings are chosen according to MPASSid documentation.

See MPASSid data models for more information.

See Common user directory settings for more information about basic user information attributes.

TrivoreID can also import student information from MPASSid. As a general practice, these attribute mappings should not be changed unless MPASSid changes its data models. Some attributes are multivalued and, for example, role attribute is structured attribute. All details are handled internally. Any changes in MPASSid data model most likely need updates in TrivoreID to take full advantage of.

Please note that TrivoreID supports only single value for domicile code and name (municipality in MPASSid). This may be problematic for some integrations that require multiple values for these fields. Contact TrivoreID development in case this proves to be an issue.