SSO with multiple O365 tenants

[fthong]

We are 3 different schools with separate O365 tenants/domains, and we would like to consolidate our SIS' from three to one using PowerSchool.

PowerSchool seems to be able to connect its SSO with one O365 tenant.

How do I set-up PowerSchool to allow 3 different tenants/domains to log in using SSO?  The 3 schools would like to retain their identity/branding so we become 1 district consisting of 3 schools with different O365 tenants/domains used to log in to PS through SSO.  

If PowerSchool can't do it, what are alternative solutions you could suggest to help us solve the SSO issue?

[KritiS]

Hi @fthong 

Currently, there is only one external IdP that can be used at a given time, and multiple tenants are not an option. However,  you can add your request as an Enhancement request. 

You can log this as an Enhancement Request on PowerSchool Ideas Portal so that the product team can take a look at this. This article should walk you through how to raise an Enhancement Request.

[mgmacdonald]

The way we solved this problem was to make sure to enable Multi/Cross-Tenant Authentication. 

We have a student tenant and a district staff tenant. We shared all the student tenant data to the main tenant in EntraID for Applications and ID. They show up as External Members in the student tenant, but then the EntraID application works for both Students Tenant and the Staff Tenant for other EntraID applications like Clever. 

I am just now starting the OIDC for PowerSchool SIS for students and Teachers to SSO using their School District provided emails. If that is successful I will post the steps in EntraID on how to share Enterprise apps across multiple tenants.