IT setup for schools

• You tell us your school's email domain, for example school.ae. We turn on school sign-in for it.
• A student signs in with Continue with Google or Continue with Microsoft, confirms they are 13 or older, and joins your school as a student. A counselor is assigned automatically.
• Staff are not created this way. Your UnisPath admin invites them from the Team page.
• UnisPath asks only for the student's name, email address and profile picture. It does not read mail, files or calendars.

Email support@unispath.com from an address on your school's domain. We need that to know the domain is yours. Include:

• your school's name in UnisPath;
• every domain your students' emails use (the part after the @). If students have their own, such as students.school.ae, send that one: each domain is set up on its own;
• whether your school uses Google Workspace, Microsoft 365, or both.

We reply within one business day.

Since October 2023, users marked as under 18 can't sign in to a third-party app until an admin has configured it. Until you do one of the two things below, students see a block message when they choose Continue with Google.

Option A: mark UnisPath as Trusted (recommended)

1. In the Admin console, go to Menu → Security → Access and data control → API controls.
2. Click Manage App Access, then under Configured apps click Configure new app.
3. Search for UnisPath and click it. If it doesn't come up, email us for our OAuth client ID and search for that.
4. Under Scope, keep your top organisational unit, or choose Select org units and tick your students' units. Click Continue.
5. Under Access to Google data, choose Trusted. Click Continue, then Finish.

You need the Service Settings administrator privilege. Changes can take up to 24 hours. If a student has already asked for access, you can also approve UnisPath from App access control → Review apps on the Admin console home page.

Option B: allow apps that only ask for basic sign-in

1. Go to Security → Access and data control → API controls → Settings.
2. Under Unconfigured third-party apps, for users under 18, choose Allow users to access third-party apps that only request basic info needed for Sign in with Google, and save.

This lets in every app that only asks for name, email and picture, not just UnisPath. Google asks schools to get parental consent where the law requires it.

Depending on your tenant's settings, students may see Approval required or Need admin approval when they choose Continue with Microsoft. One admin consent for the whole tenant stops that for everyone. UnisPath asks Microsoft for sign-in and basic profile only.

Grant admin consent once

1. Sign in as a Cloud Application Administrator, Application Administrator or Privileged Role Administrator.
2. Open the admin consent link we send you when we set up your domain.
3. Check the permissions and click Accept. You may land on a blank page afterwards; that is expected.

Or, once anyone from your school has signed in: in the Entra admin center go to Entra ID → Enterprise apps → All applications, open UnisPath, then Security → Permissions → Grant admin consent.

If user consent is turned off

Students can't approve UnisPath themselves, so grant admin consent as above. The same applies if users may only consent to apps from verified publishers: UnisPath is not a Microsoft verified publisher yet. If you'd rather approve on request, a Global Administrator can go to Entra ID → Enterprise apps → Consent and permissions → Admin consent settings, turn on Users can request admin consent to apps they are unable to consent to, and choose who reviews requests.

If only assigned users can sign in

If Assignment required? is Yes under Properties in UnisPath's enterprise app, add your student groups under Users and groups, or set it to No.

Ask one student to sign in at unispath.com/auth/login (or your school's own UnisPath address) with Continue with Google or Continue with Microsoft. They should see Join and your school's name. A block or approval message means a step above is still missing, or a Google change hasn't come through yet.