Add security to your video hub

Videos Hubs allow you to showcase a collection of videos in a set of branded, distraction-free webpages. Depending on your audience, you can also restrict access to a hub, whether that's to a specific set of customers or a group of internal employees.

Depending on the features included in your Vidyard plan, you can:

• Add a list of specific people who can access your hub, requiring a username and password
• Manage authentication to your hub with Single Sign On (SSO)
• Use an IP allowlist to restrict visitors' access to specific networks

Select a hub to secure

1. From the Vidyard dashboard, select Channels > Hubs
2. Click Edit next to the hub you want to secure
   • If applicable, select Create Hub to make a new hub
3. Select the Sharing tab

Add a list of users who can access your hub

You can choose to Add a list of specific people who can access your hub. Anyone added to the hub will receive an invitation to join and be asked to create a password.

1. Click on Change to update how users access to your hub
2. Select A list of specific people, then click Update
3. Click + Add User to enter an email address(es)

To remove a user's access to the hub, click on the X icon beside their email address.

Secure your hub with Single Sign On

Single Sign On allows you to manage authentication to your hub through an Identity Provider (IdP).

The set up process for SSO will differ depending on your IdP. In all cases, however, the process requires you to provide your IdP with several SAML URLs from Vidyard in exchange for an X.509 Certification and an Endpoint URL.

Contact your IdP if you need help understanding which SAML endpoints are required from Vidyard.

1. Click on Change to update how users access your hub
2. Select Single Sign On (SSO) users, then click Update
3. Click on Add Profile to create a single sign on connection
4. Provide your IdP with the relevant SAML URLs from Vidyard
   • Note that only some URLs may be required, depending on your IdP. In other cases, all URLs may be required.
5. Obtain the X.509 Certificate and SAML Endpoint URL from your IdP and enter them into the fields provided in Vidyard.
6. Click Save Changes

Secure your hub with an IP Allowlist

An IP range allowlist allows you to restrict access to only those viewers who visit your hub from a specified IP address(es). An IP allowlist can be enabled in conjunction with single sign on or a list of specific users.

1. Click on Change to update how users access your hub
2. Toggle IP Whitelist to ON, then click Update
3. Enter an IP address or a block of IP addresses using CIDR notation. (e.g. 127.0.0.1/24), then click Add
4. Enter a fallback URL to redirect visitors should they attempt to access your hub outside of the specified range of IP addresses.
5. Click Save Changes

Click on the X icon next to an IP address to remove it from the hub's allowlist.

Enable HTTPS for hub requests

If your hub uses a Vidyard subdomain (*hubs.vidyard.com), requests to access your hub will use HTTPS automatically.

If you've chosen to use a CNAME (your own domain), contact the Vidyard Support team to set up SSL/TLS for your hub. SSL ensures that requests to your hub are made over HTTPS.

HTTPS is required should you choose to secure your hub with user passwords or Single Sign On (SSO). Selecting these security options without SSL enabled will result in a validation error:

You can always change the route type for your domain under the Hub Settings tab.

Next steps

• Design your video hub, including page layouts, logos, HTML and CSS
• Add video videos to your hub and organize them into categories
• Set up hub integrations, including tracking scripts, Disqus and Drift