OneRoster Provisioning

Configure OneRoster to send your roster data to Canva.

1. Log in to the SIS (Student Information System).
2. Select Roster Server > Manage > Applications.
3. On the top corner, select the + Add button, then search for 'Canva Education'.
4. Select the + Add button next to 'Canva Education'.
5. Set up the data to be sent to Canva and enable the sync. We strongly recommend enabling a full permissions sync.

1. On the Roster Server Console, select Apps from the toolbar.
2. Select the gear icon to show more actions for the Canva Education app.
3. On the side menu, select API.
4. Go to the API Credentials tab.
5. Copy the following details. You’ll need these in the next step.

• Key
• Secret
• Webpage URL - You can get this by selecting Explore in API. Make sure to copy up to and include "/v1p1".

1. Log in to your Canva account.
2. On the homepage, select your account profile to open menu.
3. Choose
   gear icon Settings.
4. From the side menu, select the
   SSO and provisioning tab.
5. Under Single Single Sign-On (SSO) section, click Manage.
6. Choose Configure Provisioning.
7. Under Provision Accounts for your team, select Add provisioning method.
8. Choose OneRoster.
9. Go to the Sync Roster with OneRoster section, and fill out the details.

In the Endpoint URL field, paste your Webpage URL.

Refer to the screenshot below for the access token URL formats.

In the API Key field, paste your Key. In the API Secret field, paste your Secret.

Turn on Enable Daily Sync and Test settings to test your configuration settings. If you get an error, here are some things to check:

• If you correctly copied the credentials
• If the app (plugin in your OneRoster data provider) is enabled
• If the Token url is correct
• If the endpoint is correct (for example, there shouldn’t be text after “v1p1”)

If you’ve made sure all of the above and the error persists, it could be an allowlist issue. Contact our Support team so we can check our allowlist.

If there are no errors, select Save changes and then Sync now.

Syncing may take a few hours to finish. To check if the users have been added, go to the People page in Settings.

Once OneRoster provisioning is set up, you can manage your roster syncing settings in Canva.

1. Select your profile picture, then select Settings.
2. Go to SSO and provisioning > Roster > Manage sync schedule.
3. From here, you can manage your sync schedule and rostering settings, including the roster change limit.

When the sync schedule is on, both daily and weekly syncs will run at your scheduled time. Each sync can take 1 to 4 hours, depending on your roster size.

• Daily syncs add new students and schools, and add existing students to new classes.
• Weekly syncs remove students from schools and classes they’re no longer part of.

You can set the maximum percentage of roster changes allowed per sync. If a sync exceeds this limit, it pauses and we’ll email you to review the changes.

Recommended: 50%.

If a sync pauses:

1. Review the changes in your rostering source (for example, your SIS/OneRoster provider).
2. If they look right, go back to Canva and select Continue sync.
3. If not, select Cancel sync, correct your data, then start a new manual sync.

Manual syncs will run a sync immediately. This is useful for your first-time setup or after a large change in your external roster. Otherwise, your scheduled syncs will keep things up to date automatically.

Once OneRoster provisioning is enabled, Canva will continuously sync user and membership changes based on what your OneRoster source sends. This includes updates such as:

• Adding users to schools/teams/brands
• Moving users between classes/groups
• Removing users from schools/teams/brands when they’re no longer returned in the roster data or are marked as inactive/deleted in the rostering source

OneRoster syncing can trigger removals when users are no longer present (or no longer eligible) in the rostering source. To help prevent large-scale removals during long school breaks, Canva uses a pause purge window.

Default pause purge window (US summer)

Note: This default pause purge window applies to US schools and districts only.

• May 30 – September 1 (recurs yearly)
• Times are in UTC, starting at 00:00 on each date
  • Window opens: May 30 00:00 UTC
  • Window closes: September 1 00:00 UTC

Canva supports the following roles: team admin, Teacher, aide, and student. Users assigned with a role that’s unsupported will not get provisioned in the syncs.

However, while we recognize the team admin role, this role can’t be assigned to users and will be assigned as a Teacher by default.