itopia CloudApps Classroom delivers high-performance Windows applications to students and instructors using a chromium-based browser. Getting your CloudApps environment ready only takes a few minutes, and you can be up and running in no time at all.
Currently, other browsers—such as Firefox and Safari—are not compatible with CloudApps Classroom.
You’ll start from your District Dashboard. This Dashboard provides an overview of your environment and allows you to manage district-wide settings as well as individual schools.
Then, follow the steps below to:
- Add District administrators
- Configure roster sync
- Configure Google Workspaces and single sign-on
- Create a School
- Manage your District's Domain Allow List
Add District administrators
To get started, navigate to the itopia Labs Admin Portal and sign in as an existing user that has District Admin or higher permissions.
1. From the Dashboard, click the your District name in the top left corner.
2. From the District Dashboard, locate the Admins section → click +New.
3. Enter the primary email address and select a role for the admin account. The available roles are:
- Owner: full read/write access to all aspects of the School District and all schools within that district. District Owners also have access to billing information. This is the role assigned to the initial user account that configures the itopia Labs District.
- Editor: full read/write access to the District. Editors can create additional admin accounts for the School District they are assigned to.
- Viewer: read-only access to all aspects of the School District(s) they are assigned to. Users with this role cannot change settings, create or delete resources, or perform any actions.
4. When you’re finished, click Create.
Configure roster sync
Access to a lab can be granted via Direct Assignment, but itopia also provides the ability to integrate with multiple third-party rostering solutions to make lab assignments a simple task.
Currently, CloudApps Classroom can sync with Google Workspace, Microsoft Azure, and ClassLink. The Canvas integration is coming soon!
From the District Dashboard, locate the Configuration card → click Set Up Now under the Roster Sync section. Then, follow the prompts to log in to your rostering platform.
You can find more information about syncing with third-party platforms here: Roster Syncing with Third-Party Platforms
Configure Google Workspace and single sign-on
The Google Workspace Single Sign-on configuration allows students and instructors the ability to transfer their login session from the student portal (https://labs.itopia.com) to their lab once the lab session is initiated.
This offers a simpler experience for users, since they won’t need to authenticate again after their session has started.
The District Administrator is responsible for configuring Google Workspace and Single Sign-on (SSO) for their CloudApps environment. Learn more about configuring SSO here: Single Sign-On Integration Setup
Create a School
Each District can have one or more Schools within it.
Head to the District Dashboard, then locate the Schools tile → click +New.
Give the School a name and assign a primary administrator. Click Create when you’re ready.
Manage your District's Domain Allow List
You can add specific URLs or domains to your District’s Domain Allow List using the Labs Admin Console (https://labs-admin.itopia.com).
The Domain Allow List supports the following formats:
- Domains and subdomains (e.g. itopia.com and labs.itopia.com)
- Partial or full URL paths (e.g., itopia.com/itopia-labs)
- Wildcards (although this is equivalent to omitting that portion of the URL; e.g., *.itopia.com and itopia.com/*)
- Protocol enforcement (e.g., https://itopia.com)
To edit your district’s Domain Allow List:
1. Log in to the Labs Admin Console as an administrator with Editor or higher privileges for the District you’d like to configure.
2. Find the District Policies tile → click Edit.
3. Enter the URLs you want to allow access to.
URLs can be separated by a comma, semicolon, or by pressing [ENTER].
4. When you’re finished, click Save.
Any new Class sessions that are started will automatically receive the new Allow Lists; sessions that are currently running will need to be restarted.
Domain Allow Lists can be managed district-wide or by individual schools. Any URLs added to the district-wide policy will propagate down to all existing and future schools.