Articles in this section

How to set up Google Single Sign-On (SSO) for your Video Hub

Avatar
Brendan O'Driscoll
  • Updated

You can set up Google Single Sign-On (SSO) authentication for your Vidyard Video Hub and even have your Hub accessible from the G Suite (Google Apps for Work) App menu. This allows you to provide a secure, easy-to-access, and centralized location for all your internal Vidyard players - even a Live stream channel! 

Requirements 

There are two requirements to set up SSO on your video hub:

  1. A company G Suite (Google Apps for Work) account
  2. A Vidyard Video Hub (if you do not have a Hub you can request one in the Feature Store.)

Set up Google SSO authentication for a Video Hub 

  1. Open Hubs in the Vidyard menu and click Edit next to the Hub for which you want to set up SSO.  
    The Hubs security tab offers a drop down menu. Single Sign On is the first option in that menu.Note: If you haven't set up a Video Hub yet, learn how here. 
  2. Click the Security tab for your Hub.
  3. Click the Manage Users drop-down list and select Single Sign-On (SAML 2.0). Keep this page open for now.

    Note: The Use HTTPS for all requests toggle must also be enabled in order to use SSO.

    If you are using a CNAME for your video hub domain, please contact Vidyard Support. Further steps are required to create a secure connection between your chosen domain and Vidyard's.
  1. In a separate browser tab, go to your Admin Console in Google and click Apps.
    The Apps icon is in the Google Admin console. 
  2. Select SAML Apps.
    Google SAML apps option is in the App Settings
  3. Click Enable SSO for a SAML application.
    The Enable SSO for a SAML application button is in the bottom left corner.
  4. Click Set up my own Custom App.
    Setup my own custom app button is at the bottom of Google Setup Step 1
  5. Copy the following information from the Google IdP Information window and paste it into the corresponding Vidyard Hubs SSO fields:
    • Copy from Google field: SSO URL, Paste into Vidyard field: SAML Endpoint URL 
    • Copy from Google field: Entity ID, Paste into Vidyard field: Audience URL
  6. In the Google IdP information window, under Option 1, click Download Certificate.
    The Google IdP information is displayed.
  7. A .pem file will be downloaded. Click on this file and open it with a text editor program. (Eg: TextEdit or NotePad)
  8. Copy all of the text in the downloaded certificate that you just opened, including "Begin Certificate" and "End Certificate".
    The certificate is displayed in a text only program. 
  9. Switch back to your Vidyard Hubs SSO tab and paste all of the text from step 11 into the x.509 certificate box in Vidyard. Click Save Changes.
  10. On your Google page, add a name, description, and logo for the App, then click Next.
    Step 3 in Google SSO setup
  11. In your Vidyard Video Hub security tab, copy the ACS URL, then switch back to your Google page and paste it into Google's ACS URL field. 
  12. Next, go back to your Vidyard Video Hub security tab, copy the Audience URL, then switch back to your Google page and paste it into Google's Entity ID field.
  13. Leave Start URL blank and Signed Response unchecked, then click Next.
    Step 4 in Google SSO setup
  14. Click Finish.
    Step 5 of the Google SSO setup process
  15. Now that your app is configured, click the 3 dot-menu and select ON for everyone to enable the app for your whole organization.
    The 3 dot menu and ON for everyone option.

The app will now provide secured access to the Vidyard Video Hub. If the Hub URL is shared externally, the viewer will be redirected to the Google Login page.

Related articles