Allow URLs across Guided Browsing sessions, eg: login redirections Follow
This article helps Hāpara administrators allow required login pages (SSO) so students can sign in successfully during Highlights Guided sessions.
Who this is for
Admins
Summary
If students are being blocked from a sign-in page during a Highlights Guided session, add the site’s login URLs to the Domain allow list in the Hāpara Admin Console. This keeps those login/redirect pages accessible even when teachers run Guided sessions.
Steps to Follow
1) Collect the correct login URLs
Ask the teacher which site students are trying to access (for example: a digital textbook, assessment site, or state testing site).
Identify the login/redirect URL(s) students hit during sign-in (these are often different from the learning content URL).
Make sure each URL includes the full beginning of the address (including
https://orhttp://).
2) Add URLs in the updated Hāpara Admin Console (recommended path)
In the Hāpara Admin Console, go to Settings.
Select Highlights (Screens).
Find Domain allow list, then click Manage links.
Add one URL per line (include
https://orhttp://).Click Save.
4) Wait for changes to apply, then test
After saving, allow about 5 minutes for changes to reach student devices.
Have a teacher start a Focus session and confirm students can sign in without the login page being blocked.
Common allow list examples
Google authentication and functionality
Add these URLs if students sign in with Google during Guided sessions:
https://accounts.google.comhttps://apis.google.comhttps://*.googleapis.comhttps://www.googleapis.com/oauth2https://oauth2.googleapis.com/token
The below URLs are specific to Google functionality for third party apps, eg: Drive access, Classroom content, etc
https://www.googleapis.com/drivehttps://www.googleapis.com/upload/drivehttps://www.googleapis.com/admin/directoryhttps://content-classroom.googleapis.comhttps://googleusercontent.com
Clever authentication and functionality:
If students sign in through Clever during Guided sessions, your school may need to allow one or more URLs used during the Clever sign-in and redirect process.
Clever details their domains here, and please note that there may be SSO urls specific to your instance. Please reach out to our support team to query specific URLs further:
https://clever.comhttps://s3.amazonaws.comhttps://accounts.google.com
Important: Only add URLs that your school has confirmed are required for its Clever sign-in flow. Shared hosting domains such as
s3.amazonaws.comcan host content from many unrelated organizations. Allowing a shared hosting domain may make other content hosted on that domain accessible during a Guided session.
ClassLink authentication and functionality:
ClassLink details their domains here:
https://launchpad.classlink.comhttps://login.classlink.comhttps://myapps.classlink.comhttps://classlink.nethttps://classlink.comhttps://classlink.iohttps://apis.classlink.comhttps://apps.classlink.com
Additional Tips
Only allow what is required: URLs added to the Domain allow list can become available to students during Guided sessions. Be especially careful with shared hosting domains such as AWS, cloud storage services and content delivery platforms because a single parent domain may contain content from many unrelated organizations. Confirm the required login URLs, use the narrowest URL possible and test with a student account before deploying changes broadly.
Collect + test ahead of time: Hāpara recommends collecting likely login-required sites from teachers and testing important sites (like state testing) before instructional time.
Teacher workaround (if a domain allow list update can’t happen immediately): Teachers can include known login URLs in their Guided session link list to reduce access errors.
Redirect-heavy sites: Some sites redirect through multiple pages during login; teachers may need students to sign in first (before starting Guided), or include both the content URL and login URL(s) in the same session when possible.