Use the class lists
your school already has.

Three steps to get connected

1. IT approves access. Choose the provider and the students and classes it shares with ClassGuard. Credentials stay on your school’s server.
2. An administrator reviews the list. Open Student lists, choose Review students and check new students, class memberships and anyone losing access. Save after reviewing.
3. Assign classes and set up devices. In Staff & classrooms, assign imported groups to teachers. Install the student extension and finish enrollment.

Existing spreadsheet students can be linked by matching email when an administrator explicitly selects that option before reviewing. Choose one authoritative roster source for each student.

Google Classroom & Workspace

IT connects your school’s Google directory and selected Classroom courses using approved read-only access. Review and save students in the Google panel. Configured Google student sign-in is available for this enrollment path.

Clever

IT needs an approved Clever Secure Sync district-app token and district ID. Your district shares the intended students and class sections with the application. Clever’s application setup, agreements and any certification requirements must be completed before a live connection.

ClassLink

IT obtains the app-scoped ClassLink OAuth2 Proxy roster address and application access token after the district shares data. Use the connection details shown by ClassLink Partner Portal and its API reference.

Canvas

IT selects the Canvas courses to import and configures an approved read-only API token on your school server. ClassGuard imports active students and course sections. Students finish device enrollment with their personal setup codes.

OneRoster & compatible SIS systems

IT can connect a compatible OneRoster roster service using its approved read-only OAuth2 credentials. The provider supplies the exact roster address, token address and permissions.

For your IT team

On the school server, run npm run configure:integrations. The helper saves provider credentials in a private file with restricted access. Restart the school service, then review the first import in the administrator dashboard. Google uses its separate setup guide.

Optional scheduled sync can run after the first reviewed import. Failed or empty requests keep the saved roster, and large automatic removals require review.

The connectors synchronize rosters and class memberships. Staff use their assigned accounts and classrooms. Configure school sign-in separately for staff and students. Live provider access and simultaneous classroom capacity need district testing.