About
The Samlgroupsync module automatically adds users to Kaltura groups at login based on values received from your SAML Identity Provider. You can use the raw SAML values as group IDs/names or map them to different group names inside Kaltura.
Users with a large number of groups may experience a slower first login while their groups are being synchronized.
Configure
1. Go to your Configuration Management console, and navigate to the Samlgroupsync module. You can also navigate directly: https://{your_video_portal_URL}/admin/config/tab/samlgroupsync.
The Samlgroupsync page displays.
2. Configure the following:
enabled - Set to 'Yes' to activate the module.
attributes
Use this section to define which SAML attribute contains the group values.
Click + Add "attributes" to add a new entry.
A new section opens:
For each attribute configure the following:
attribute – Enter the SAML attribute name (for example: memberOf, roles, groups).
valueMappingType – Choose how the SAML attribute’s values should be converted into Kaltura group IDs and names:
Use attribute’s value as group ID & Name - Each value in the SAML attribute becomes both the group ID and the group name inside Kaltura.
Example: If the SAML attribute contains engineering, the Video Portal creates (or matches) a group with ID engineering and name engineering.
Map attribute’s value to a group ID & Name - Lets you define a custom mappings. When this option is selected, an additional valueMapping section appears:
Click +Add "valueMapping" to open an additional section:
Complete:
value – The exact SAML attribute value
group – The Kaltura group ID & name to assign when this value is received.
The Video Portal evaluates these values at login and syncs the user to the appropriate groups.
removeFromGroups - Select 'Yes' to allow removal of users from groups that were previously synced. If set to 'No', users are only added to groups, not removed.
createNewGroups - Select 'Yes' to allow automatic creation of Kaltura groups based on the SAML values. If set to 'No', groups must already exist.
valid - Displays when the module configuration is valid.
Click Save to apply your settings.
