You can use Mahara as multi-tenanted instance. That means that several different institutions can share one Mahara installation. All users from these different institutions can:
share portfolio pages with each other
give feedback on each other’s pages
work collaboratively in groups across institution boundaries
In Administration you can set up as many institutions as you wish. Institution administrators can only administer their users and their institutions but not make any changes to site settings.
You can also set up institutions for different parts of your organisation to use different themes, have different default settings and / or authentication methods.
Notitie
Even if you use Mahara with one organisation only and do not want to distinguish different departments within your organisation, we recommend you set up at least one institution and not use “No institution”. By setting up at least one institution you will have two more roles available: institution staff and institution administrator.
You can create institution administrator accounts which are less powerful than the site administrator accounts. By having institution administrators, you can allow them to take care of user account creation and group creation etc. without giving them full powers over the site preventing that too many people can make site changes.
You see an overview of all institutions that exist on this Mahara installation (site administrator) or that you have access to as institution administrator.
Notitie
Institution administrators who manage only one institution do not see this page, but immediately the settings for their only institution.
Overview page for institutions
Search: Search for a particular institution by its name and then click the Search button.
Click the Add institution button when you want to create a new institution. This button is only visible to site administrators.
Click the Edit with three dots button to edit institution members, staff and administrators.
Institution: Institutions are listed alphabetically. If you click the institution’s name, you are taken to the contacts page.
Members: Number of registered members in this institution.
Maximum: Maximum allowed members in this institution. If an institution has a maximum set and it is reached, any new members will be rejected. The site administrator and institution administrator receive a notification to take further steps.
Staff: Number of institution members with staff rights.
Administrators: Number of institution members with institution administrator rights.
Click the Manage icon to change institution settings.
Click the Delete icon to delete an institution. You can only delete an institution when there are no members in it.
Notitie
The institution “No institution” is the default “institution”. It cannot be deleted as it is the standard Mahara site.
Only site administrators can add institutions. However, once an institution exists, institution administrators can change many of the settings.
When you want to add an institution by clicking the Add button on Administration → Institutions → Institutions, you need to provide some basic information for the new institution. You can change all settings later on.
Add a new institution
Institution name: This field is required. It is the name that all users see throughout the site to identify this institution.
Notitie
An internal ID for the institution is generated automatically.
Institution expiry date: Tick the Set date checkbox if you want to give this institutuion a specific expiry date. You can then select the year, month and day from the drop-down menus. Institutions do not expire by default.
If you specify an expiry date for this institution, once the warning time for institution expiry has been reached, site and institution administrators will receive a otification about this institution’s impending expiry.
If the auto-suspend expired institutions option is set, then once the expiry date has been reached, this institution will be suspended automatically, and users of this institution will no longer be able to log in.
The warning time for institution expiry and the auto-suspend expired institutions options can be found in the institution settings under Administration → Configure site → Site options.
Registration allowed: Switch to “Yes” when you want to allow self-registration of new users. As institution administrators, you will be asked to confirm that users can join your institution. If you decline, their new account will be associated with “No institution” unless you have the Confirm registration option enabled. When you do not allow registration, nobody can register a new account, ask to join your institution or leave it without your permission.
Confirm registration: Switch to “Yes” if you want to control that no new accounts are created unless the administrator approves the registration. You receive a notification about pending registrations when a new user wants to register.
Notitie
Switching this setting on is recommended for most sites that allow user self-registration to prevent spammers from creating accounts and misusing the site.
Default membership period: You can set how long users will remain associated with this institution per default. Choose an option from the drop-down menu and then specify the number of days, weeks, months or years. After this length of time, the users will be removed from the institution. Users will receive a notification before this time reminding them that they will be removed soon. However, that does not mean that they will lose their account. They will still have that and be associated with “No institution”.
Language: Choose the language from the drop-down menu that you want the users in your institution to use by default.
Notitie
This is a default setting. Users in your institution can choose their own language in their account setting.
Logo: You can upload an image that will be displayed to your institution’s members in place of the standard header logo.
Theme: Use the drop-down menu to choose the theme that you wish to use for this institution. All pages in that institution will receive that theme. When users from other institutions view portfolio pages that were created in this institution, they will see this institution’s theme on these pages. If Site default is selected, when a site administrator changes the site default theme, the theme for the users of this institution will change, too. You can install more themes in the theme folder on the server. Check out the community-contributed themes. If users are allowed to have page themes, these pages are not affected by theme changes. Mahara also has a configurable theme which allows you to create a theme on the fly.
Drop-down navigation: Switch to “Yes” if you want your institution to use a drop-down navigation instead of the tabbed navigation.
Notitie
If you use the “Site default” theme option, this option is disabled as the site default settings are applied. If you wish to use the theme that the site uses, but use a different main navigation option, select the theme directly for your institution, and the switch becomes available to you for selecting.
Page skins: Switch to “Yes” if you want your institution members to use page skins.
Notitie
This feature is only available when the server administrator enabled skins for the site.
Comment sort order: Decide on the sort order of comments on artefacts when they are displayed on a page. You can choose between the following:
Earliest: Sort your comments in chronological order showing the oldest comments first and the newest last.
Latest: Sort your comments in reverse chronological order showing the newest comments first and the oldest last.
Threaded comments: Display comments on a page in a threaded manner so you can see easily which comment is a reply to which previous comment.
Show online users: If the site administrator allowed the “Online users” side block, you can decide which group of users you want to have displayed for this institution:
None: The side block is not displayed to institution members.
Institution only: Only institution members are displayed in the side block.
All: All users on the site are displayed in the side block.
Require license information: Switch to “Yes” if your institution members need to choose a license for each artefact they upload or create. They can set a default license in their account settings. You only see this option if the site administrator turned on License metadata in the general site settings.
Default license: You can choose a default license for your institution members’ content. They can overwrite this default license in their account settings. You only see this option if the site administrator turned on License metadata in the general site settings. If the site administrator allowed custom licenses, you can enter one using the drop-down menu option “Other license (enter URL)”. This license can then also be used by your institution members.
Notitie
If you are not sure which default license to choose, please consult your organisation’s lawyer or a copyright lawyer.
Default quota: You can set the amount of file quota new users registering with this institution shall have.
Update user quota: Swith to “Yes” if you want to apply the default quota you choose above to all existing institution members.
Allow institution public pages: Switch to “Yes” if you want to allow users belonging to this institution to create portfolio pages and collections that are accessible to the public rather than only to registered users. If you allow public pages, users can also create secret URLs for their pages. Otherwise they cannot.
Maximum user accounts allowed: Specify the maximum number of accounts that can be created in this institution. If you leave this field blank, there is no limit to the number of accounts.
Notitie
When the maximum number of accounts has been reached and another user tries to register for the institution, the site administrator as well as the institution administrator for that institution receive a notification. That allows them to take further steps.
Locked fields: Switch any value to “Yes” if you don’t want to allow changes to it by users. Disabled switches are for profile fields which are locked in the institution settings for “No institution”. These profile fields are locked at the site level and cannot be unlocked for individual institutions.
Notitie
Locking profile fields such as first name, last name and display name can be beneficial for institutions that wish to always identify their users by their real names and not allow users to choose nicknames.
Click the Submit button to save your changes and create this institution, or click Cancel to abort the creation of this institution.
You can upload a logo to any theme replacing the standard logo that comes with the theme. If you upload a file with large dimensions, the logo will be shrunk to fit the available space. To achieve optimal results, upload a small logo.
Upload a logo
Logo: Upload the logo that you want to use on your institution theme from your computer and click the Submit button at the bottom of the page.
Once you have submitted your changes, the logo will be replaced in the header and it also appears in the settings to show what you have uploaded.
Delete logo: If you want to revert back to the standard logo, switch to “Yes” and click the Submit button at the bottom of the page.
Notitie
There is a special logo that can be picked up by Facebook in order not to display a random image from the site. This logo must be placed into the theme folder. Mahara’s Raw theme has the Mahara logo, but it could be changed to a different one in another theme. For more information see the tracker item.
The configurable theme is only a display theme. That means that users of the institution in which it is in use see the theme applied to the site and their pages. However, when users from another institution browse the portfolio pages of users from this institution, they do not see the configurable theme, but their own theme.
You can change the configurable theme directly on the institution settings page.
Colour options for the configurable theme
In order to change any of the colours, either provide the hexadecimal color code or choose the colour from the colour picker that becomes available as soon as you click in one of the colour fields.
Theme: Choose the “Configurable Theme” from the drop-down menu and the “Custom theme configuration” options become visible.
Header background: The colour of the header.
Text on header background: The colour of text in the header.
Links: The link colour on pages and in the sidebar.
Headings: The heading colour for all headings except in the sidebar.
Navigation background: The colour of the top navigation bar.
Navigation text: The colour of the text / links in the main navigation bar.
Reset colours: Switch to “Yes” if you want to go back to the original colours of the configurable theme.
Click the Submit button at the bottom of the page to make your changes.
Notitie
If you do not see the theme changes immediately when you are logged in as institution member, you may have to clear your browser cache.
Example of a configurable theme
The numbers on the example page refer to the configurable theme options above.
Your Mahara site itself is listed as institution under Administration → Institutions → Institutions. Per default, it has the name “No institution” and you can change certain settings that are applied to the site.
Notitie
Most settings for the site are made in Administration → Configure site → Site options.
Edit the “No institution” site institution
Institution display name: This field is required. It is the name that people see when registration is allowed for the site without having to register for a particular institution.
Authentication plugin: You can decide which authentication methods you want to allow. See Edit an institution for more information.
Registration allowed: Switch this option to “Yes” if you want to allow people to register on your site without registering for a particular institution. If you switch this setting on but not the setting Confirm registration, new user accounts do not need approval.
Notitie
Be careful disabling Confirm registration. Spammers can misuse your site and simply create accounts without your knowledge.
Confirm registration: Switch this option to “Yes” if you want to control that no new accounts are created unless the site administrator approves the registration. You receive a notification about pending registrations when a new user wants to register.
Logo: Here you can replace the standard site logo without having to place it in the theme folder on the server. You can upload an image that will be displayed to everyone who is not in an institution.
Page skins: Switch this option on if you want your users who are not in a particular institution to use page skins.
Notitie
This feature is only available when the server administrator enabled skins for the site.
Comment sort order: Decide on the sort order of comments on artefacts when they are displayed on a page. You can choose between the following:
Earliest: Sort your comments in chronological order showing the oldest comments first and the newest last.
Latest: Sort your comments in reverse chronological order showing the newest comments first and the oldest last.
Locked fields: Switch any value to “Yes” if you don’t want to allow changes to it by users. Any field that you enable here is locked from editing in institutions.
Notitie
Locking profile fields such as first name, last name and display name can be beneficial for institutions that wish to always identify their users by their real names and not allow users to choose nicknames.
Click the Submit button to save your changes, or click Cancel to discard your changes.
Administration → Institutions → Institutions → Click the Manage icon next to an institution
Once you have created your institution, you can edit its settings, suspend or delete the institution. You will have to choose at least one authentication method for this institution so that user accounts can be created.
Notitie
Only site administrators can add, edit and delete authentication methods for an institution and suspend it. An institution can only be deleted if there are no members in it.
You should set up at least one authentication method. Otherwise, nobody can log in to this institution. You can add multiple authentication methods to your institution to account for different users and how they are allowed to authenticate. That means for example for a university:
Faculty and students could log in with their standard login and password if that is governed by LDAP / Active Directory (LDAP authentication) or single sign-on such as SAML (SAML authentication).
They could also log in via Moodle as that can be added as secondary authentication method for other methods like LDAP or single sign-on (XML-RPC / MNet authentication).
Alumni could have their MNet / LDAP authentication changed to the internal authentication once they finish their studies.
External assessors who do not have a university login, can be given the internal authentication so that they can receive a login, but the university administration does not have to issue a login which would give them access to other infrastructure as well.
All these then still log in to the same Mahara institution. Alternatively, you could also separate the users into their own institutions on your Mahara installation if that is more appropriate for your use case. This could mean for the above example:
Faculty and students log in and are automatically placed into the institution “University”. They see the standard university theme.
Alumni are placed into the institution “Alumni” for easier user management as you could have the alumni coordinator manage the users. Having them in a separate institution on Mahara would make it easy to see who an alumni is. Additionally, they could receive a slightly different university theme that is geared towards alumni, and they can also receive different messages on their dashboard.
External assessors who are placed into the separate institution “Assessors” could be administered easily by an administrator who is the liaison for them without giving that administrator access to the user management of all other university users. They can receive the standard university theme, but receive different messages on their dashboard.
Before you can use the IMAP, LDAP, SAML or XML-RPC authentication methods, you must install their extensions on your server.
Plugins available for authentication in an institution
Once your institution is created, the settings include an additional option, Authentication plugin. You see all authentication methods that are already in use for this institution.
From the drop-down menu choose one of the authentication methods that are available:
IMAP: User accounts are authenticated against an IMAP server. This is rarely used.
Internal: User accounts are created in Mahara. This is the default authentication method for a new institution.
LDAP: User accounts are authenticated against an LDAP server or Active Directory server.
None: Anyone can log in by picking a username and password. This should only be used for testing but not on a live site.
Persona authentication is not available anymore as of Mahara 16.04.4 because Mozilla dicontinued it. You can migrate any existing Persona accounts to internal authentication.
Click the Add button to see the configuration screen for an external authentication method before it is added.
Waarschuwing
Be careful when choosing the “None” authentication method. This allows anyone to log in. It should only be used for testing purposes.
Use this authentication method to authenticate against an LDAP / Active Directory server.
Set up LDAP authentication
Authority name: Enter a descriptive name to help you identify this authentication method. Preferably, choose a short name. This field is required.
Host URL: Specify hosts in URL form, e.g. ldap://ldap.example.com. Separate multiple servers with ; for failover support. This field is required.
Contexts: List the contexts where users are located. Separate different contexts with ;, e.g. ou=users,o=org;ou=other,o=org. This field is required.
User type: Select from the drop-down menu how users are stored in the LDAP directory. This field is required. You can choose between:
Novell Edirectory
posixAccount (rfc2307)
posixAccount (rfc2307bis)
sambaSamAccount (v. 3.0.7)
MS Active Directory
default
User attribute: Enter the attribute used to search for users. It is often cn. This field is required.
Search subcontexts: Select “Yes” if you want to search for the users also in subcontexts. This setting is required.
Distinguished name: If you want to use bind-user to search users, specify it here. It should look something like cn=ldapuser,ou=public,o=org. Leave this blank for anonymous bind.
Password: Enter the password for the “distinguished name”.
LDAP version: Choose the LDAP version you are using from the drop-down menu. This setting is required.
TLS encryption: Switch to “Yes” if you use this encryption mechanism.
Update user info on login: Switch to “Yes” if you want to have the first name, last name and email address updated with the corresponding LDAP values at each login. Enabling this option may prevent some MS ActiveDirectory sites / users from subsequent Mahara logins.
We auto-create users: Switch to “Yes” if you want Mahara to create user accounts automatically when a user authenticates successfully but does not yet have an account.
LDAP field for first name: Enter the name of the field in the LDAP record that contains the user’s first name.
LDAP field for surname: Enter the name of the field in the LDAP record that contains the user’s last name.
LDAP field for email: Enter the name of the field in the LDAP record that contains the user’s email address.
LDAP field for student ID: Enter the name of the field in the LDAP record that contains the user’s student ID.
LDAP field for display name: Enter the name of the field in the LDAP record that contains the user’s display name.
User sync: Decide whether you wish to synchronize your users via a cron job and make additional settings.
Group sync: Decide whether you want to create groups automatically in Mahara based on your LDAP groups.
Click the Submit button to enable this authentication method or click Cancel to abort your changes.
You can set up your LDAP authentication so that user account creation can be automated. User account deletion should be considered carefully.
Configure the LDAP user sync
Sync users automatically via cron job: Enable this setting to activate a task in the cron which will automatically create and/or update user accounts based on records in the LDAP server.
Notitie
By default, this cron task will execute once daily at midnight (server time). Edit the record in the “auth_cron” table or use the optional command-line script supplied at htdocs/auth/ldap/cli/sync_users.php if you wish to schedule it to run at other times or with other settings.
This setting will have no effect if the cron is not running. See the installation guide for instructions on how to set it up.
Update user info in cron: Switch to “Yes” if you wish for user information to be updated via the cron if they changed in the LDAP record.
Auto-create users in cron: Switch to “Yes” if you want new users in your LDAP directory to get an account automatically.
Additional LDAP filter for sync: Provide an LDAP filter here, and the sync will only see users in LDAP who match that filter. Example: Example:uid=user*.
Waarschuwing
Use this setting with caution if you have auto-suspend or auto-delete enabled, as doing so will cause all user accounts in your institution which do not match the filter to be suspended or deleted.
If a user is no longer present in LDAP: Choose from the drop-down menu what you want to do if users are no longer in your LDAP directory:
Do nothing: Users keep their account. This is the recommended setting.
Suspend user’s account: The user’s account will be suspended. The user will no longer be able to log in, and their content and pages will not be viewable. However, none of their data will be deleted, and the user can be un-suspended by the cron when their LDAP record reappears, or manually by an administrator. Alternatively, their authentication method could be changed to the Mahara internal.
Delete user’s account and all content: The user’s account will be deleted, along with all their content and pages.
Waarschuwing
The automatic deletion of user accounts is not recommended. The data is fully deleted from the server when a user’s account is deleted. The account can only be restored from a backup. Some information such as friend relationships and group membership cannot be restored.
Click the Submit button to enable this authentication method or click Cancel to abort your changes.
You can set up your LDAP authentication so that group creation can be automated. Group deletion should be considered carefully.
Configure the LDAP group sync
Sync groups automatically via cron job: Enable this setting to activate a task in the cron which will automatically create and/or update groups and their membership based on records in the LDAP server.
Notitie
By default, this cron task will execute once daily at midnight (server time). Edit the record in the “auth_cron” table or use the optional command-line scripts supplied in htdocs/auth/ldap/cli/ if you wish to schedule it to run at other times or with other settings.
Note: You will also need to activate the “Sync groups stored as LDAP objects” and / or “Sync groups stored as user attributes” settings in order for groups to be synced.
Group members can be removed as well as added by this setting. If a group is no longer found in the LDAP records, all of its members will be removed from the group.
This setting will have no effect if the cron is not running. See the installation guide for instructions on how to set it up.
Auto-create missing groups: Switch to “Yes” if you want to have new groups in your LDAP directory created automatically in Mahara.
Role types in auto-created groups: Decide which roles users can have in auto-created groups.
Course: Members, tutors and administrators
Standard: Members and administrators
Exclude LDAP groups with these names: If you want to auto-create groups, but do not want to include all groups, you can exclude some. Type their names here.
Include only LDAP groups with these names: If you want to restrict the creation / synchronisation of your groups to a specified few, list them here.
Sync groups stored as LDAP objects: Switch to “Yes” if your groups are stored as standalone records in LDAP. Example:
Group class: Put the LDAP objectclass that groups are expected to have here.
Group attribute: Enter the LDAP attribute that maps to a group’s name. It is often cn.
Group member attribute: Enter the LDAP attribute in which the group’s members are stored in. It is often uniqueMember.
Member attribute is a dn? Switch to “Yes” if each entry in the “Group member attribute” field is a “distinguished name”. Disable this setting if each entry in “Group member attribute” field is a username only.
Process nested group: Switch to “Yes” if your groups can contain other groups as members. If enabled, the sync process will recursively include the members of these nested groups into the parent group.
Notitie
The process will safely cease recursing if it detects a circular reference.
Sync groups in these contexts only: List the contexts where groups are located. Separate different contexts with a semicolon ;. Example: ou=groups,o=org;ou=other,o=org.
Notitie
If this field is left empty, the group sync cron will fall back to using the same list of contexts as the “Contexts” setting for where users are located.
Search subcontexts: Change to “Yes” if subcontexts should be included in the synchronisation.
Sync groups stored as user attributes: Switch to “Yes” if each LDAP user record has an attribute which indicates a group the user should be in. This setting will cause the LDAP sync cron to create a group for each unique value in the specified user attribute (or in those listed in the “Acceptable group names” field), and place each user in the appropriate group (or groups, if they have multiple values for the attribute).
User attribute group name is stored in: Provide the LDAP attribute in which the name is stored.
Only these group names: When creating groups based on user attributes, only create groups with these names. This will not affect groups created via the “Sync groups stored as LDAP objects” setting, if it is active.
Click the Submit button to enable this authentication method or click Cancel to abort your changes.
Choose this authentication method for your institution when you have a SAML 2.0 Identity Provider Service set up for your organisation that allows you to use the same login for multiple applications.
SAML 2.0 authentication
Institution attribute (contains “…”): Enter the attribute that will be passed from the Identity Provider (IdP) that shows which institution the user belongs to. This usually directly correlates to the LDAP attribute (the signin service of the IdP), e.g. eduPersonOrgDN. This field is required.
Institution value to check against attribute: Enter the value that will be checked against the institution attribute value as passed from the IdP. If the institution regex switch “Do partial string match with institution shortname” is set to “Yes”, this value can be a regular expression that will be used to check against the institution attribute value. This field is required.
Do partial string match with institution shortname: Switch to “Yes” to treat the value in “Institution value to check against attribute” like a regular expression.
User attribute: Enter the name of the attribute passed by the IdP that contains the username. This field is required.
Match username attribute to remote username: This switch is set to “Yes” by default and needs to stay on this setting. It matches the user attribute value to the remote username field assigned to a given user (not the internal Mahara username). Only if you have the experimental feature of “usersuniquebyusername” turned on can you set this switch to “No”. We do not recommend this unless you are very experienced and have control over all applications in question.
Waarschuwing
By default, SAML authentication instances have the “Match username attribute to remote username” setting enabled. If that setting were disabled, someone with control over any SAML identity provider could gain control over any user account on that Mahara site by setting the username attribute accordingly. In other words, administrators of one institution could control users in other institutions. You would only be able to disable this setting if you set the “usersuniquebyusername” variable to “true” in config.php file. However, you should not do that on a Mahara instance to which multiple SAML providers connect and you are not in control of all usernames that are created.
Zie ook
If you disable “Match username attribute to remote username”, you get an error message which talks about the config setting for “usersuniquebyusername”. Please refer to the experimental feature of the “usersuniquebyusername” variable for more information.
Allow users to link own account: Switch to “Yes” if you want to allow users to link their own internal Mahara account to the authenticated SAML account. This depends on the “Match username attribute to remote username” option being enabled. If this setting is turned on when users try to log in via SSO and their username as well as the email for example match an internal username, they can link their accounts. That would allow them to log in either via the SSO login or via the regular login box into the same account and avoid account duplication.
Update user details on login: Switch to “Yes” to update the first name, last name and email address with the corresponding IdP values passed through at each login.
We auto-create users: This is disabled by default and needs to stay disabled if the option “Match username attribute to remote username” is enabled. Switch to “Yes” to create user accounts on Mahara automatically when a user authenticates successfully but does not yet have an account. Only if you have the experimental feature of “usersuniquebyusername” turned on can you enable this setting. We do not recommend this unless you are very experienced and have control over all applications in question.
SSO field for first name: Enter the name of the attribute passed by the IdP that contains the user’s first name.
SSO field for surname: Enter the name of the attribute passed by the IdP that contains the user’s last name.
SSO field for email: Enter the name of the attribute passed by the IdP that contains the user’s email address.
Click the Submit button to enable this authentication method or click Cancel to abort your changes.
Use the XML-RPC authentication for connecting a Mahara instance to a Moodle or an other Mahara installation for sharing login information. With Moodle 2 that does not only mean that you can log in to Mahara via Moodle, but also that you can transfer certain activities into your Mahara portfolio from Moodle.
A Moodle site can only be connected to Mahara once no matter how many institutions you have set up. Every XML-RPC authentication instance in Mahara must have its own unique remote wwwroot and must be associated with a single institution.
Notitie
You must have networking enabled in order to use this authentication method.
Set up MNet authentication
Authority name: Enter a descriptive name to help you identify this authority. Preferably, choose a short name. This field is required.
WWW root: Enter the web address of the root of the remote application, e.g. http://example.com. This field is required. If your WWW root requires a specific port, enter the port number that the remote application is listening at. You probably will not need to add a port unless you are connecting to a https service or your remote application is running on a non-standard port.
Site name: Enter the name to present to your users to identify the remote site. If you enable SSO, they may click on this name to start a session at the remote site. This field is required.
Application: Choose the application on the remote side. You can choose between “Mahara” and “Moodle”.
Parent authority: If you set a parent authority from the already existing authentication methods, users will be able to log in using that authority as well as MNet. For example, you could set up SAML authentication and have that be the parent of this MNet authority. That means that users will be able to log in by clicking the SSO login button using their SSO credentials as well as via MNet from their Moodle. You do not have to set a parent authority. If you do not, users using MNet will only be able to access Mahara via MNet, i.e. log in to Moodle or the other Mahara first.
Notitie
If you choose a Parent authority, ensure that all the users are associated with this authentication method instead of the MNet one. Otherwise, they will not be able to log in via the parent authentication method. If the remote username for MNet and the other authentication method is already the same, you just need to change the authentication method. If they are not yet the same, you need to update the user details together with changing their authentication method.
Wrong login box message: Enter a message to display when a user tries to log in via Mahara’s login form but is not allowed to if you have not set up a parent authority.
SSO direction: Choose your SSO direction from the drop-down menu:
They SSO in: Enable this option to allow users from the remote site to roam to your Mahara site without having to enter their username and password. This is the most commonly used setting. The remote application is the source of the login information and where accounts are created initially.
We SSO out: Enable this option to allow your users to roam from Mahara to the remote site without having to enter their username and password there. Mahara is the source of the login information and where accounts are created initially.
Update user info on login: Set this switch to “Yes” to bring over user data from the remote site upon each login and update your Mahara user record with any changes. The following fields, when filled in on Moodle, are filled in Mahara:
First name (always carried over)
Last name (always carried over)
Email address (always carried over)
Profile picture
Description (Introduction on Mahara)
City
Country
Language
HTML editor setting
We auto-create users: Switch to “Yes” to create user accounts on Mahara automatically when a user authenticates successfully but does not yet have an account.
They auto-create users: Only use this setting if you selected “We SSO out” in the SSO direction setting.
We import content: Not all network-enabled applications support this, but if they do, e.g. Moodle, this will allow users of the remote site to import content to Mahara. It depends on the option “They SSO in” from “SSO direction” and it is sensible to also have “We auto-create users” set.
Click the Submit button to enable this authentication method or click Cancel to abort your changes.
If the connection to the remote site is successful, the public key of the remote site will be stored with the authentication method and rotated when needed. If there is a problem and the public key does not update, you can exchange it yourself with the correct one while you are troubleshooting the underlying problem.
Zie ook
Refer to the comprehensive guide about setting up Mahoodle, the combination of Mahara and Moodle, for step-by-step instructions on how to set everything up on the Moodle side and on Mahara. The guide explains the steps for both Moodle 1.9 and Moodle 2.x.
If you have set up multiple authentication methods in one institution, you can decide on the order in which they are checked.
Order of authentication methods
Use the Up arrow and the Down arrow button to move a specific authentication method up or down in the list. Mahara looks for accounts of users in the order of the list.
Delete a particular authentication method by clicking the Delete button .
Notitie
You cannot delete an authentication method when there are still users who require it to log in. Before deleting an authentication method, you have to move the users to another authentication method.
All pages come with default text that you can change entirely. Every page must contain some text. You can use the visual editor to style your page.
Edit static pages for an institution
Institution: If you are a site administrator or an institution administrator of more than one institution, choose the institution for which you want to change page content. If you administer only one institution, its name is displayed directly.
Page name: Choose the page you want to edit from the drop-down menu.
Use site default: Switch to “Yes” if you want to use the content that is displayed on the page for the entire site. Switch to “No” if you want to provide your own content.
Page text: Change the text in the editor window if you selected “No”. You cannot leave this field empty.
You can add and remove members from one institution in bulk. As site administrator, you can always add members to an institution. As institution administrator, you can only invite users to become members.
You can filter users to display fewer and add to or remove them more easily from your institution:
People who have requested institution membership
People who have not requested institution membership
People who have left a given institution
People who are already institution members
People who have been invited
Notitie
You can double-click a name and it will be moved to the other side. This goes for all functionalities that are similar to this one here.
10.5.6.1. People who have requested institution membership¶
If your institution allows self-registration, users who are not already members of your institution can request to join it.
Institution administrators receive notifications about membership requests. Site administrators only receive notifications about users wanting to join “No Institution”.
Accept or decline institution membership requests
Institution: Choose from the drop-down menu to which institution you wish to add users. If there is only one institution, its name will be displayed without the drop-down menu.
Users to display: Choose People who have requested institution membership.
Add new members: You can search for users in the search box if there are too many names listed.
Users who have requested membership: Select the users you wish to add to the institution.
Add the users by clicking the right-arrow button .
Users to be added / rejected: If you put users into the box for users to be added / rejected by accident, you can remove them from that list by clicking on them.
Then click the left-arrow button , and they are removed from the list.
When you have all the members you wish to add to the institution, click the Add members button.
Alternatively, if you wish to decline users’ membership, you can select them and then send a general denial by clicking the Decline requests button.
10.5.6.2. People who have not requested membership yet¶
An admin can also take the initiative and invite or add users to an institution.
Invite or add users to become institution members
Institution: Choose from the drop-down menu to which institution you wish to invite / add users. If there is only one institution, its name will be displayed without the drop-down menu.
Users to display: Choose People who have not requested membership yet.
Invite users to join the institution: You can search for users in the search box if there are too many names listed.
Non-members: Select the users you wish to invite to the institution.
Add the users to the list Users to be invited by clicking the right-arrow button .
If you put a person into the box for users to be invited by accident, you can remove them from that list by clicking on them.
Then click the left-arrow button , and they are removed from the list.
When you have all the members you wish to invite to the institution, click the Invite users button. The users receive a notification and can accept or decline the institution membership invitation.
Alternatively, if you are a site administrator, you can click the Add members button add users directly to the institution without asking them first.
10.5.6.3. People who have left a given institution¶
An administrator can filter users by the previous institution to which they were attached in order to find them more quickly.
Notitie
This is only of importance for a multi-tenanted Mahara instance with at least 2 institutions.
Invite or add users to become institution members when they had left an institution
Institution: Choose from the drop-down menu to which institution you wish to invite / add users. If there is only one institution, its name will be displayed without the drop-down menu.
Users to display: Choose People who have left a given institution. “Left” is interpreted loosely, it also means when an administrator removed them from an institution.
Previous institution: Choose the institution from which you want to add users. The users must have left it first to be listed here.
Invite users to join the institution: You can search for users in the search box if there are too many names listed.
Users who have left institution [name of the institution]: Select the users you wish to invite or add to the institution listed.
Add the users to the list Users to be invited by clicking the right-arrow button .
If you put a person into the box for users to be invited by accident, you can remove them from that list by clicking on them.
Then click the left-arrow button , and they are removed from the list.
When you have all the members you wish to invite to this institution, click the Invite users button. The users receive a notification and can accept or decline the institution membership invitation.
Alternatively, if you are a site administrator, you can click the Add members button add users directly to the institution without asking them first.
Notitie
Mahara keeps track of the last institution of a user via an invisible tag.
10.5.6.4. People who are already institution members¶
You can remove users from an institution, e.g. if they are no longer students at a school or university, but should still have an account on Mahara or when they are just switching institutions on the same Mahara instance.
Remove users from an institution
Institution: Choose from the drop-down menu which institution’s members you wish to display. If there is only one institution, its name will be displayed without the drop-down menu.
Users to display: Choose People who are already institution members.
Remove users from the institution: You can search for users in the search box if there are too many names listed.
Current members: Select the users you wish to remove from the institution.
Add the users to the list Users to be removed by clicking the right-arrow button .
If you put a person into the box for users to be removed by accident, you can remove them from that list by clicking on them.
Then click the left-arrow button , and they are removed from the list.
When you have all the members you wish to remove from your institution, click the Remove users button.
An administrator can uninvite users from an institution.
Uninvite users from joining your institution
Institution: Choose from the drop-down menu which institution’s invited users you wish to display. If there is only one institution, its name will be displayed without the drop-down menu.
Users to display: Choose People who have been invited.
Revoke invitations: You can search for users in the search box if there are too many names listed.
Invited users: Select the users you wish to univite from joining your institution.
Add the users to the list Users to be uninvited by clicking the right-arrow button .
If you put a person into the box for users to be uninvited by accident, you can remove them from that list by clicking on them.
Then click the left-arrow button , and they are removed from the list.
When you have all the users you wish to uninvite from the institution, click the Revoke invitations button.
You can give users staff rights in an institution in which they are members. The staff role will allow them to create course groups for example. This page allows you to do that in bulk for many users at once.
Institution: Choose the institution from the drop-down menu for which want to give staff rights to members. If there is only one institution, its name will be displayed without the drop-down menu.
Staff users: You can search for users in the search box if there are too many names listed.
Institution members: Select the institution members who shall get staff rights.
Add the users to the list Institution staff by clicking the right-arrow button .
If you put a user into the institution staff list by accident or want to remove existing staff members and return them to normal membership status, select them.
Then click the left-arrow button , and they are removed from the list.
When you have all the members you wish to have as staff in the institution, click the Submit button.
You can give users administrator rights in an institution in which they are members. The administrator role will allow them to manage users in their own institution. This page allows you to do that in bulk for many users at once.
Institution: Choose the institution from the drop-down menu for which want to give admin rights to members. If there is only one institution, its name will be displayed without the drop-down menu.
Admin users: You can search for users in the search box if there are too many names listed.
Institution members: Select the institution members who shall get administrator rights.
Add the users to the list Current administrators by clicking on the right-arrow button .
If you put a user into the institution administrator list by accident or want to remove existing administration members and return them to normal membership status, select them.
Then click on the left-arrow button , and they are removed from the list.
When you have all the members you wish to have as administrators in the institution, click the Submit button.
The Admin notifications page lists all users with institution and site administrator access on your site. It shows their selected notification preferences for all admin notifications. There should be at least one administrator receiving each type of message generated.
Notitie
Institution administrators only see admin notifications for their own institutions.
Profile completion lets you select content that users of an institution need in order to have a “completed” profile. The parameters for a completed profile can differ from one institution to another. In some cases you can also decide how many content items a user needs of a specific artefact type to complete their profile.
Zie ook
The site administrator needs to enable the profile completion feature in the user settings for institutions to be able to use it.
Set up profile completion for an institution
Institution: If you administer more than one institution, select the one for which you want to set up the profile completion from the drop-down menu. If there is only one institution, its name will be displayed without the drop-down menu.
Profile completion preview: Once you clicked the Submit button, you will see a preview of the progress bar that is displayed to your institution users in the sidebar.
Profile: Set the switches to “Yes” for the items that you want your users to fill in from their profile. Select the number of groups a user should join or number of friends a member of your institution should make.
Résumé: Set the switches to “Yes” for the résumé items that your users should fill in to have a completed profile.
Plans: Select the number of plans and tasks a user should have from the drop-down menus.
Journals: Select whether a user needs to have a certain number of journal entries for a complete profile.
Files: In this section you can decide whether users need to upload a certain number of files. You can also specify the file type and decide how many items of each file type users should upload for a complete profile.
Annotation: Select from the drop-down menu the number of comments a user should make on annotations to gain a completed profile.
Comment: Select from the drop-down menu the number of comments a user should make to gain a completed profile.
You can create pages for your entire institution. Although you could always create pages under a regular user account that other users could copy into their own portfolio, the advantage of institution pages is that new members in the institution can receive a copy upon joining the institution.
Create institution pages
Institution: If you administer more than one institution, select the one for which you want to create or edit pages. If there is only one institution, its name will be displayed without the drop-down menu.
Click the Create page button to start a new page from scratch.
Notitie
Creating and editing an institution page is very similar to creating and editing a portfolio page. However, not all blocks are available when editing an institution page in the page editor due to the different context. Please refer to the overview of blocks for a list of all the blocks that you can use in an institution page.
Click the Copy a page button to start a new page from a copy of an already existing one. This does not have to be an institution page but can be any page that you are allowed to copy.
Search: Type your search term into the search field. Per default, you search by title, description, tags and the owner of a portfolio.
Use the drop-down arrow to limit your search to tags only.
Sort by: Decide on the sort order in which you wish to display your pages.
None (blank): The default sort order lists the dashboard and profile pages before all other pages. Pages are displayed in alphabetical order.
Date created: List the pages in chronologically reverse order with the newest pages first.
Last modified: Display the pages in the order of their last modification with the most recent pages that have been changed first.
Last viewed: Show the pages in the order in which they were viewed by you and others starting with the most recently viewed pages.
Most visited: Display the pages that have been visited most first in the list.
Most feedback: List the pages in descending order based on the number of comments they have received.
Notitie
The sort order that you does not change when you navigate away from the page or log out. When you change the sort order, that new setting will be used until you change it again.
Click the Search button to search your pages based on your search and / or sorting criteria.
The page title and description if available are displayed.
Click the Edit button to update an existing institution pages.
Click the Delete button to remove an institution pages.
Notitie
When somebody leaves comments on an institution page or artefact, the institution and site administrators receive a notification.
You can create collections for your entire institution. Although you could always create collections under a regular user account that other users could copy into their own portfolio, the advantage of institution collections is that new members in the institution can receive a copy upon joining the institution.
Create institution collections
Institution: If you administer more than one institution, select the one for which you want to create or edit collections. If there is only one institution, its name will be displayed without the drop-down menu.
Click the New collection button to start a new institution collection.
Click the Copy a collection button to start a new collection from a copy of an already existing one. This does not have to be an institution collection but can be any collection that you are allowed to copy.
Click on the collection title to go to the first page of the collection.
View the description of this collection.
Click on any title of a page within a collection to jump directly to it.
Click the Manage pages button to move pages within a collection, add to or delete pages from a collection.
Click the Edit button to change the title and description of a collection.
Click the Delete button to delete the collection. The pages will still exist.
You create institution journals like regular user journals. Institution journals allow you to create a journal template and then copy that into user accounts for example. They also allow you to create a news blog for your institution.
Institution journals
Institution: If you administer more than one institution, select the one for which you want to create or update a journal. If there is only one institution, its name will be displayed without the drop-down menu.
You can create multiple journals. Click the Create journal button to set up a new journal.
All your journals are listed on Administration → Institutions → Journals with their titles. The titles link through to the individual journals.
You can see the description of the journal.
You see how many entries you have in each journal.
Click the Arrow icon to be taken to the journal and see all journal entries.
Click the New entry button to create a new journal entry directly from this screen.
Click the Edit button to make changes to your journal title, description or tags.
Click the Delete button to delete the journal and all its entries.
Waarschuwing
When you click the Delete button, you receive a confirmation message whether you really want to delete the journal or not. If you used the journal or an entry of it in a page, Mahara lets you know so you can decide whether to delete the journal or not. Once you agree to delete the journal, your journal and all its content are removed permanently.
You can see a list of all institution pages and collections for a specific institution.
Share institution pages and collections
Institution: If you administer more than one institution, select the one for which you want to change sharing permissions for pages or collections. If there is only one institution, its name will be displayed without the drop-down menu.
Select whether you want to change permissions for a collection or a page.
Notitie
You can select more collections or pages on the following screen.
Collection / page name: All collections or pages for that institution are listed here.
Access list: View the access permissions for the pages and collections.
Click the Edit access button to change the permissions of who can view and copy a page or collection.
Click the Edit Secret URL button to define a secret URL for a page or collection.
Sharing an institution page or collection is very similar to sharing a portfolio page or collection. The only difference is that you can allow new institution members to receive a copy of an institution page or collection immediately upon joining the institution.
Setting for copying an institution page for new institution members
When you clicked the Edit access button on the Share page for institution pages and collections, click the Advanced options link and change the switch for Allow copying to “Yes”. This now allows everyone who has access to the selected page(s) or collection(s) to copy them.
Copy for new users: Enable this option if all new users in your institution shall receive a copy of the selected page(s) or collection(s) into their portfolios when an account is created for them.
Notitie
If you enable this option without also enabling the option “Allow copying”, your users will not be able to make a copy of the page(s) or collection(s) themselves if they need another one.
Click the Save button at the bottom of the page to save your changes.
When site administrators create and share an institution page or collection, they can share it with the members of the institution in which they created the page or collection.
The files area in an institution holds all files that are uploaded by administrators as institution files. The uploading process works like the one in the personal files area.
The type of statistics you have available for institutions are very similar to the site statistics. You can view statistics for each institution individually and for example use the CSV download options to
compare the institution statistics to the site statistics
compare institutions with each other
Notitie
All institution administrators have access to their institution(s)’ statistics at any time. If the site administrator set the staff statistics access correctly, institution staff will also be able to see the statistics for their institution(s).
You have access to basic information about individual institutions. Choose the one you would like to see from the institution drop-down menu before proceeding.
Basic information about an institution
You can view information about:
Growth of your number of users and pages over time in a graph.
Institution created: Date when your institution went live.
Users: Number of
registered users, i.e. everybody who has an account.
active users, i.e. users that have at least logged in once and have done something.
Pages: Number of pages and average pages per user with pages.
Disk usage: The amount of disk space your institution uses, i.e. the total amount of space occupied by files.
The Content tab in the institution statistics holds information about
artefacts
blocks
general site information
Statistics for the current week for all artefacts etc.
Name: The statistics item itself, e.g. artefact, block or other general item on institution level. It is linked to the Historial data statistics for an overview of the changes over time.
Modified: This column shows the number of updates to an artefact etc. during the current week.
Total: This column shows the total number of instances of the statistics items.
Export statistics in CSV format: Download the cumulative statistics about all the statistics shown for the week as CSV file.
Notitie
The number of total content statistics will vary because only when an artefact or block etc. was used, will the statistics be created for that type.
The Historical data tab in the institution statistics holds historical data over time about a particular content item that you have clicked on in the Content tab. Changes are saved per default on a weekly basis. However, whenever you run the cron manually, a new statistics will be created as well. You can also download the statistics as CSV file.
Historical data for individual content items
Historical statistics for field: Display of the artefact or other item that you are looking at.
Date: Display of the date when the statistics were created.
Modified: Display of the number of modifications from the previous date to the next one when the statistics were created.
Total: Total number of instances of this statistical item at the time the statistics were run.
Export statistics in CSV format: Download the cumulative statistics for this particular item as CSV file.
Notitie
When you click on the Historical data tab without choosing an item to look at in particular beforehand, the number of users are displayed as that is a statistics that is available on all sites.
When you turn on Confirm registration for an institution in the institution settings, no user account in this institution is created without the administrator knowing it. If a user is rejected, no account is created. If the option Confirm registration is not turned on, a user account is created in the “No institution” institution but not in the actual institution.
Below follows the process for self-registration with Confirm registration turned on.
Institution: Select the institution for which you want to register. There is an indicator whether the institution you wish to register for requires administrator approval.
Registration reason: If administrator approval is required, you can provide a reason why you want to join the institution.
If the site administrator requires users who self-register to agree to the terms and conditions, the “Registration agreement” of the site, you must read through them below and then make your choice.
Click the Register button.
The administrators of that institution and the site administrator receive a notification about the pending registration. They then review pending registrations.
You will receive an email which includes a link to confirm your email address. You must click that link within 24 hours. If you do not, you will have to start the registration process again from the beginning.
As administrator, you can view pending registrations for your institutions on the Pending registrations page in Administration → Institutions → Pending registrations.
Pending registrations page
Institution: If you administer more than one institution, select the one for which you want to review pending registrations. If there is only one institution, its name will be displayed without the drop-down menu.
Pending registration: You see a list of all registration requests that include the names of the requesters and their email addresses.
Registration reason: The reason for registration is displayed.
Click the Approve button when you want to approve this registration request. You will have to confirm your approval on the next page. The person self-registering receives an email with a link to complete the registration process.
Click the Deny button when you do not want this person to register for your institution and receive an account.
When you approve users, you can decide whether they should receive staff rights immediately. For example, this helps to give all teachers at a school staff access rights upon their self-registration.
Approve pending registrations
Institution staff: Switch to “Yes” if the user shall have staff access rights.
Click the Approve button when you want to approve this registration request or click Cancel to abort the approval process.
When you deny a person access to your institution, you can also provide a reason.
Reason for denying institution membership for a self-registering user
Denial reason: Write your reason for denying institution membership that might help the person to know why you do not want to give them access.
Click the Deny button to send a notification to the person’s email address with the reason for the denial or click Cancel to abort the denial process.
When users are accepted as members in an institution via this process, they must still complete the registration process. This is necessary to provide information in all required fields besides a password and a username.
Complete the self-registration for an institution
New username: Choose your new username. A default username is suggested, but you can provide a different one. If your suggested username is already taken, the system will let you know after you submit your information.
New password: Choose a password for your account. This field is required.
Confirm password: Re-type the new password. This field is required.
Click the Submit button to complete your registration. You will be taken to your Dashboard.
An internal ID for the institution is generated automatically.
