Your school account.
A familiar way in.

Staff keep their assigned access

Create each staff account and assign its role and classrooms first. Staff can link a school identity from School sign-in after confirming their ClassGuard password. Administrators can also approve a verified school identity in Staff & classrooms. Signing in with a matching email alone does not grant access.

Students connect to the saved roster

Import the school’s students before turning on SSO. Google, Clever and ClassLink can match their verified identities to the corresponding imported roster. Microsoft and other providers need a school-approved identity mapping or signed student ID. Unknown or disabled students cannot enroll.

IT connects the provider

1. Approve and register the application with your identity provider. Use the school server’s callback address.
2. Run npm run configure:sso on the school server. Client secrets stay in its private configuration.
3. Restart the school service, approve staff identities and test an enrolled student. Then set the managed extension’s school address and sign-in provider.

The provider buttons appear after configuration. Live app approval and school credentials are required. The public ClassGuard product website does not host your school’s sign-in service.

No student portal on managed Chrome

IT can enable managed student mode for Google Workspace Chrome profiles. The extension connects to the primary school account without opening a setup form or sign-in prompt. School app approval and an active roster match are required.

Classroom viewing works the same way

School sign-in connects an identity; it does not start screenshot sharing. The installed extension sends visible active-tab screenshots only during an authorized teacher-started class.