About

You can connect your Video Portal to your organization’s login system using Single Sign-On (SSO). This lets users sign in to the Video Portal with their regular organizational credentials instead of a separate Kaltura username and password.

If your organization assigns specific user roles or permissions through SSO, you can also configure authorization so that roles in the Video Portal are updated automatically at login.

For general information about authentication and authorization methods, see:

• Video Portal authentication and authorization options
• Video Portal SSO Integration Guide

Set up SSO login

1. Go to your Configuration Management console, and navigate to the Auth module. You can also navigate directly: https://{your_KMS_URL}/admin/config/tab/auth.



The Auth page displays.



2. Scroll down to the authNAdapter field and select SSO Gateway AuthN from the drop-down menu.



3. Scroll down to the refreshDetailsOnLogin field and choose whether to update user details (first name, last name, and email) from your organization’s authentication system each time a user logs in.



4. Scroll down to the SSO section and configure the following fields:

• secret – Enter a shared secret used for secure communication between the Video Portal and your login page. You can enter your own value or enter 'default' to use the Kaltura Admin Secret.
• loginUrl –  Enter the full URL of your organization’s login page (including https://).

The Video Portal automatically adds a ref parameter to this URL so that, after users log in, they’re redirected back to the correct Video Portal page. You don’t need to add this parameter yourself.

• logoutUrl –  Enter the full URL where users are redirected after they log out of the Video Portal. When a user clicks 'Logout', the Video Portal ends their session and redirects them to this page.

If your organization uses a central login system such as CAS (Central Authentication Service) or another SSO platform, you can use this logout page to also sign the user out of other connected systems.

• hashAlgorithm – Select the algorithm used to generate the session key for secure logout operations. 

6. Click Save.

If your SSO system manages user roles or permissions, continue to the next procedure. Otherwise, you can skip this step.

Set up SSO user roles (optional)

1. In the Auth module, find the authZAdapter field and select SSO Gateway AuthZ from the drop-down menu.



2. Under refreshRoleOnLogin, choose whether to update a user’s Video Portal role from your authentication system each time they log in.

• Select 'Yes' to synchronize roles automatically at every login.
• Select 'No' if you prefer to manage roles directly in Kaltura.

3. Click Save.