--- title: "Application and Status Page Authentication" slug: "application-and-status-page-authentication-sso-single-sign-on" description: "Streamline application access with Slate's default authentication or integrate institutional Single Sign-On for seamless login experiences." tags: ["Single Sign-On", "Applicant Status Page", "Applications"] status: "update" updated: 2026-11-09T18:02:58Z published: 2026-11-09T18:02:58Z canonical: "knowledge.technolutions.net/application-and-status-page-authentication-sso-single-sign-on" --- > ## Documentation Index > Fetch the complete documentation index at: https://knowledge.technolutions.net/llms.txt > Use this file to discover all available pages before exploring further. # Application and Status Page Authentication Applicants can access their applications and status pages via: - **Slate authentication (default):** Using an email address and password - **Institutional Single Sign-on:** Using credentials created in your institution's single sign-on system ## Slate authentication This is the default authentication method for applicants in Slate. For an applicant to authenticate, they must complete the following: 1. Go to your institution’s **authentication URL**: `https://apply.slateuniversity.edu/apply` 2. Provide their first name, last name, email address, and, optionally, their birthdate. Slate sends them an *Account Creation* system email, which includes a 9-digit PIN and a link to your institution’s account creation page. You can [customize this email’s content](/v1/docs/system-emails#account-creation). 3. When the applicant follows the link in the Account Creation system email, they are prompted to enter the PIN and birthdate (if provided) for verification to create a password. The password is stored as a salted hash. 4. In the Slate-hosted application, the applicant enters their email address and password. If the applicant selects `Forgot Your Password?`, Slate sends a system email that includes instructions to reset their password. This system email is sent automatically and [can also be customized](/v1/docs/system-emails#account-password-reset). ## Institutional Single Sign-On authentication Applicants can use credentials from your institution’s single sign-on system to access the Slate-hosted application. Slate can authenticate against one single sign-on system for both administrative users and applicants. > [!CAUTION] > 🔔 Important! > > If your institution [requires VPN access for administrative users](/v1/docs/require-vpn-access-for-administrative-users), this may prevent external login via SSO. The following procedure links institutional usernames to existing person records. Use the username that your single sign-on system sends to Slate. This value can differ from the person’s email address. 1. Prepare the SSO usernames and unique IDs for the applicants whose records you want to update. 2. [Create a custom source format](/v1/docs/creating-a-custom-source-format) to import the usernames. Include these data points in the file: - **Unique ID** (to match against the appropriate record in Slate) - **Username** 3. Map the unique ID appropriately and the username to **Record** → **Slate User Login Override**. [![](https://cdn.us.document360.io/cd8ea7a6-07f3-4846-a554-627ac016d3e3/Images/Documentation/rmmtnebntk6eobqr7yzmamceclip0__1_.png?sv=2026-02-06&spr=https&st=2026-11-14T00%3A37%3A19Z&se=2026-11-14T01%3A37%3A19Z&sr=c&sp=r&sig=aCX87gcilxEGoog6iI04S4pD%2B1odoB2p%2Bqn%2BDimyPrE%3D)](https://cdn.us.document360.io/cd8ea7a6-07f3-4846-a554-627ac016d3e3/Images/Documentation/rmmtnebntk6eobqr7yzmamceclip0__1_.png?sv=2026-02-06&spr=https&st=2026-11-14T00%3A37%3A19Z&se=2026-11-14T01%3A37%3A19Z&sr=c&sp=r&sig=aCX87gcilxEGoog6iI04S4pD%2B1odoB2p%2Bqn%2BDimyPrE%3D) 4. Import the file with the custom source format. After importing the usernames, give applicants the institutional SSO link. The following example opens institutional authentication and then returns the applicant to the application page. Replace the example hostname with your Slate hostname. - **Slate URL**: `https://apply.slateuniversity.edu/manage` - **Single Sign-on URL**: `https://apply.slateuniversity.edu/manage/login?realm=&r=/apply/` ## Providing user access Applicants who have institutional credentials can use the SSO link. Applicants who use Slate credentials can continue to use the standard login page when your authentication configuration permits both routes. Coordinate the intended login options with your SSO administrator. ### Choose the return destination Keep `realm=` empty in the person-login link. The `r` parameter specifies the page to open after authentication. For example, use `/apply/` for the application page or `/apply/status/` for the status page: ```plaintext https://apply.slateuniversity.edu/manage/login?realm=&r=/apply/status/ ``` ### Share the institutional login link Place the SSO link on your institution’s website or in the instructions on the application login page. Label the link so applicants know which credentials to use. You can also use a friendly URL that redirects to the SSO link. For example, `https://apply.slateuniversity.edu/enrolled` can redirect to `https://apply.slateuniversity.edu/manage/login?realm=&r=/portal/enrolled`. A bookmark to the destination portal skips this friendly URL. The portal settings and database authentication configuration then control the login route. Review [Portal Security Scopes & Access Filters](/v1/docs/portal-authentication-methods) before you use a portal as the destination. ### Plan access with your SSO administrator Decide when applicants receive institutional credentials and where you will provide the SSO link. For example, you can offer the link to enrolled students who already have institutional accounts. Using institutional SSO earlier in the application process requires an account-provisioning plan with your SSO administrator. ## CAS institutional authentication If your institution uses **Central Authentication Service (CAS)** to authenticate people into Slate, the CAS response supplies the username in `user`. Slate reads profile attributes named `firstname`, `lastname`, and `email`. When Slate finds an existing person by the SSO username, that login leaves the saved first name, last name, and email unchanged. If record creation through SSO is enabled and the username is new to Slate, Slate first tries to match an existing person using email, first name, and last name together. If no match is found, it attempts to create a person record. See [Matching Criteria for Person Records](/v1/docs/matching-criteria-for-person-records). The **Service CAS Attributes** and **Service CAS Use ID** settings control the identity information that Slate sends to another system. For that direction of authentication, see [Slate Authentication Service](/v1/docs/slate-authentication-service). ### Confirm CAS return URLs for Test and Production environments The CAS service URL includes the return destination. Its complete value can differ between application and portal logins. Test environments can authenticate independently or use Production authentication, depending on their configuration. ## Unsetting SSO usernames To unset SSO username values: 1. Query for records that you want to unset the SSO Username for. This query should have a: - Person-scoped unique identifier, like the person record's GUID - Literal export that has a name, like "Clear SSO", but no value/Literal. This is the column you'll use to unset the SSO Username. 2. Export the results to your desktop. 3. Import the file with [Upload Dataset](/v1/docs/upload-dataset-stages). The import must: - Be set to **Unsafe** - Match on existing records 4. Map the column with empty values from step 1 to **Record → Slate User Login Override** 5. Select **Null Handling.** [![enable the Null Handling setting](https://cdn.us.document360.io/cd8ea7a6-07f3-4846-a554-627ac016d3e3/Images/Documentation/no_border.png?sv=2026-02-06&spr=https&st=2026-11-14T00%3A37%3A19Z&se=2026-11-14T01%3A37%3A19Z&sr=c&sp=r&sig=aCX87gcilxEGoog6iI04S4pD%2B1odoB2p%2Bqn%2BDimyPrE%3D)](https://cdn.us.document360.io/cd8ea7a6-07f3-4846-a554-627ac016d3e3/Images/Documentation/no_border.png?sv=2026-02-06&spr=https&st=2026-11-14T00%3A37%3A19Z&se=2026-11-14T01%3A37%3A19Z&sr=c&sp=r&sig=aCX87gcilxEGoog6iI04S4pD%2B1odoB2p%2Bqn%2BDimyPrE%3D) 6. Import the file. 7. Confirm the import made the desired changes.