Enabling Common Login Configurations
On the Configuration Management panel Auth tab of the Kaltura MediaSpace Administration Area, the MediaSpace login options are available for all authentication and authorization methods.
Enabling Authentication Methods
On the Configuration Management panel Auth tab of the Kaltura MediaSpace Administration Area, the following authentication methods are supported as part of the MediaSpace standard installation. When you select an authentication adapter, a set of relevant configuration fields is displayed to fill in.
- LDAP Authentication – User authentication and credentials validation through direct access to the organizational LDAP or Active Directory server.
- SSO Gateway Authentication – A Kaltura generic gateway for integrating with a customer‑ specific login and authentication implementation, while providing the user with a Single Sign-On experience.
- Header Authentication – User is authenticated through a request in the organizational authentication system. The response includes the authenticated user ID in a specific HTTP header.
- Kaltura Authentication – Manage MediaSpace users and their authentication in Kaltura.
- Custom Authentication Methods – For any other type of authentication method, custom adapters can be developed and added to the MediaSpace installation.
Configuring Multiple Authentication Providers
Kaltura MediaSpace supports multiple authentication sources for users of collaborative work platforms. The default configuration for the enableMultiAuth field in the Auth tab is No. Each authentication method’s configuration fields are provided and are collapsible and expandable.
Select Yes in the enableMultiAuth field in the Auth tab of the Kaltura MediaSpace Administration Area to configure multiple authentication methods. For more information see Authentication and Authorization Are Managed in Multiple Locations.
Enabling Authorization Methods
On the Configuration Management panel Auth tab of the Kaltura MediaSpace Administration Area, the following authorization methods are supported as part of the MediaSpace standard installation. When you select an authorization method, a set of relevant configuration fields is displayed to fill in.
- LDAP Authorization – The user’s application role in MediaSpace is determined based on organizational groups in which the user is a member, which are managed in the organization’s LDAP server. This authorization method usually is used together with the LDAP authentication method. The method also can be selected when using other authentication methods (SSO Gateway authentication, Kaltura authentication, and Header authentication).
- SSO Gateway Authorization – The user’s application role in MediaSpace is set and passed to MediaSpace as part of the customer-specific login and authentication implementation, which is set through the Kaltura SSO gateway interface. Always use this option with SSO Gateway authentication. This option cannot be used with any authentication method besides SSO Gateway authentication.
- Kaltura Authorization – Manage user authorization to access MediaSpace and user MediaSpace application roles in Kaltura. This authorization option can be used with any other authentication method (SSO Gateway authentication, Kaltura authentication, and Header authentication).
- Custom Authentication Methods – For any other type of access and role authorization method, custom adapters can be developed and added to the MediaSpace installation.
