Configuring SSO Gateway Authentication and Authorization

To learn more about integrating MediaSpace with your authentication systems using the MediaSpace SSO Gateway,  Kaltura MediaSpace Authentication and Authorization Solutions – Overview and Kaltura MediaSpace SSO Integration Guide.

1. On the Configuration Management panel of the Kaltura MediaSpace Administration Area, open the Auth tab.
   After you complete and verify the following steps, click Save.
2. Under authNAdapter, select SSO Gateway AuthN.
    
3. Select your preferences for the common login options.
4. Under refreshDetailsOnLogin, select your preference.
   This option affects the updating of the user’s first name, last name and email address (when provided) from your authentication system upon every login.
   
5. Under sso, select your preferences for integrating the MediaSpace SSO Gateway with your login implementation:

• loginUrl – Enter the absolute URL where you host the login page.
• logoutUrl – Enter the URL to which MediaSpace redirects a user after invalidating the local MediaSpace session (for example, when a user clicks logout).
  • On your site you may use this page to invalidate other authenticated sessions, if needed (for example, CAS login).
  • A sessionKey URL parameter is automatically appended to the logout URL. This parameter securely encapsulates the user information, enabling you to know which user logged out. The sessionKey parameter is constructed using the secret shared with the login page.
• If you are using the MediaSpace SSO Gateway to authorize user access to MediaSpace with a specific application role, continue with the next procedure.

1. On the Configuration Management panel of the Kaltura MediaSpace Administration Area, open the Auth tab.
   After you complete and verify the following steps, click Save.
2. Under authZAdapter, select SSO Gateway AuthZ.
    
3. Under refreshRoleOnLogin, select your preference.
   This option affects the updating of the user’s role upon every login.