Setting up SSO

How does it work?

Sites single sign on (SSO) provides secure access to video content using standard corporate security policies. 

Viostream provides the ability to authenticate access to your sites using on-premise Active Directory Federated Services (ADFS), Azure Active Directory, Google Oauth2 or other SAML2 compatible identity providers. To activate this feature, the account must have the SSO module. Contact your Client Services Associate for more information.

This ensures seamless and secure access control for employees and enables a streamlined workflow for viewers to login to a video portal using existing employee credentials, with no need to use a separate Viostream login and password.

Viostream Site Configuration

1. In your Viostream account, go to the site you would like to configure for SSO
2. Click Access
3. Select SAML login
4. Note down the ACS URL and Entity Id (which should always be Viostream) 
5. The values for SAML SSO URL, Certificate Fingerprint and Remote logout URL will be collected in the next step when setting up Azure Active Directory 

Azure Active Directory Configuration

1. Login to your Azure Active Directory portal at https://aad.portal.azure.com
2. Select Enterprise Applications from the Manage menu in your organization and select +New application
3. 
4. Select Non-gallery application
5. 
6. Give your application a name and click Add
7. 
8. Next select Configure single sign-on (required)
   1. 
9. Choose SAML
   1. 
10. Click the pencil icon to edit Basic SAML Configuration
11. Fill out the Identifier (Entity ID) and Reply URL (ACS URL) fields using the information we collected from our Viostream Site. Click Save
12. Now click the pencil icon to edit User Attributes & Claims and then click +Add new claim
    1. Type firstname as the claim name and choose user.givenname as the Source attribute then click Save 
    2. Click +Add new claim again and now type surname as the claim name and choose user.surname as the Source attribute. Click Save
    3. Click +Add new claim again and now type surname as the claim name and choose user.surname as the Source attribute. Click Save
    4. Lastly click +Add a group claim. Select Security groups and ensure Group ID is selected as the Source attribute. Select Customize the name of the group claim and type groups as the name. Click Save 
       1. 
13. Take note of the Thumbprint, Login URL and Logout URL
14. Enter these copied values back in your Viostream Sites configuration page and click Apply to finish your SSO configuration.