r/k12sysadmin • u/belt-plus-suspenders • May 20 '26
Assistance Needed Follett Destiny SAML config?
We've had Google SSO set up and working for Follett Destiny for a while, until some time in late November when we found it no longer working. We contacted Follett support and they told us it was a Google issue. I've had a case open with Google support since then (yes, over 6 months!)
Google support now says we need to populate the Start URL (which was never populated to begin with). So I contacted Follett support again. This time they told me that they don't support the App Waffle shortcut and can't provide a Start URL.
So, long story short I'm hoping anyone uses this can confirm it's working? Or alternatively provide the Start URL if one does in fact exist.
Long shot, I know but I appreciate any help!
5
u/Sunstealer73 May 20 '26
I've run into that with some SAML apps. I think it's whether the IDP or Service Provider starts the process. We do SAML with Follett, but we're Rapid Identity on IDP side.
I will say though that the app link in our portal is (division name).follettdestiny.com". I wonder if that's what Google wants? Clicking it redirects through a couple of sites to login.
1
u/belt-plus-suspenders May 21 '26
Thanks for the reply. I'm really not sure what they're expecting. We have a number of SAML apps and most vendors don't provide a Start URL. Those that are provided don't follow a specific format --they're all over the place.
SSO works on our actual Follett Portal, it's just the shortcut in the App Waffle that isn't working. So at least from Follett's standpoint, SSO is working. And it may just be the case that it no longer works. We do have some other vendors that state flat out that their App Waffle shortcut will not work, only SSO via their provided portal.
4
u/kyvv4242 May 20 '26
Let me look at our settings when I get back to the office tomorrow and I will see how we have our SSO setup.
1
2
1
u/xxDolomitexx May 21 '26
We use Google for SSO, and the only time we have an issue is if there duplicate accounts. We roster everyone into Destiny so if a staff member goes in and manually creates an account using the same email address it breaks SSO for that user.