Hāpara Filter: How to skip Hāpara student login on Windows Follow

In this article:

• Overview
• Prerequisites
• Configuration
• When students log in to Windows

Overview

If the Hāpara Filter is enforced by using a Windows proxy agent deployment, the student will need to log in to their own Google Workspace or Azure AD account when a browser is opened for the first time. This allows Hāpara to obtain the student's login credentials to correctly enforce policies.  However, if the student had previously signed into Windows using their own unique student account (not a shared account), the browser login will be inconvenient and unnecessary. Fortunately, there is an option in the Hāpara Filter Admin Console that can be configured to skip the additional browser login.

Prerequisites

This option will work if the following conditions are met:

• The Windows login usernames are derived from the student IDs in Google Workspace or Azure AD. For example, the Google Workspace account smith@example.com will log in to Windows as “smith” or “students\smith.”
• The student devices must be associated with your school so that Hāpara can obtain the correct settings. 
  • If the school's public IP addresses have been registered with Hāpara and the devices are used on campus, they will automatically be associated with the school. 
  • If the school's public IP addresses have not been registered with Hāpara, the students will still need to log in to Hāpara if the devices are logging in from an off-campus location for the first time. Afterward, the devices will be associated with the school and the students won’t be asked to log in again from browsers. 

To register your school's public IP, you can send an email containing the public IP to implementation@hapara.com.

Configuration

1. Log in to the Hāpara Filter admin console. 
2. Go to Configuration, then Identity Provider. 
3. Enable “Use Windows logon names to derive student identities.”
4. Input a domain name to be appended to the Windows logon name to derive the Google Workspace or Azure AD user ID. 
   • Hāpara will automatically remove the domain name before “\” or after “@” in Windows logon to get the unique user name if the domain name is present. 
   • This domain name will then be appended to the above user name to use as the Google Workspace or Azure AD user ID.
5. Click Save.
6. After enabling the "Windows logon" option, reboot the machine to have the option take effect.

When students log in to Windows

Hāpara will automatically obtain the student's Windows login name and convert it to a Google Workspace or Azure AD user. 

Below are some examples, assuming “example.com” is entered as the domain name in the Hāpara Filter admin console configuration.

Hāpara will then use the converted Google Workspace or Azure AD user ID to get the student’s OU and apply the associated applicable rules.