Restrict viewer access to your videos with single sign on (SSO)

Vidyard allows you to use single sign on (SSO) to restrict access your videos and ensure that only permitted internal viewers are able to watch.

This is a great way to facilitate internal communications and allow your teams to securely use video to share project updates or deliver onboarding and training.

Here's how it works:

• using your company's existing identify provider (IdP), create a SAML application to manage user access to your video sharing page
  
  
• in Vidyard, you can then enable the secure platform setting to restrict the playback of your video(s) to the sharing page. This means that the video cannot be watched anywhere outside of the sharing page and that viewers must first sign in to your IdP before they are allowed to watch.

You can use any identity provider software that supports SAML 2.0. Some popular IdPs include Google SSO (for G-Suite customers) or Okta.

Set up SSO on your video sharing page

• Open the settings for your sharing page
• Set up a domain name for your sharing page (if applicable)
• Create a SAML application to manage access to the sharing page in your IdP

Open the settings for your sharing page

Each folder in Vidyard is able to have its own sharing page. You may also have a sharing page that applies to the videos in multiple folders across your account.

Before you begin, take a moment to understand which sharing page you want to set up with SSO. Only videos that use an SSO-enabled sharing page can then be restricted to internal viewers through your IdP.

1. Sign in to your Vidyard account
2. Select Channels > Sharing page from the main menu
   
   • If necessary, use the Change Folders button to switch into the folder with the sharing page you want to edit
3. Select Edit to open the sharing page settings 

Set up a domain for your sharing page (if applicable)

If you haven't already, you'll need to set up a unique domain for your sharing page in order to use SSO. You must use either a Vidyard subdomain (example.hubs.vidyard.com) or use your own custom domain.

You cannot set up SSO on the sharing page when using the default route type (share.vidyard.com).

1. Open the Advanced Settings menu, then select URL Settings
2. Select a option from the Route Type menu:
   • • If Vidyard subdomain: enter a unique domain name that ends in .hubs.vidyard.com
     • If your own domain: enter the name of the subdomain that you created in your DNS provider
3. Click Save when finished

Create a SAML application for your sharing page

The set up process for SSO will differ depending on the Identity Provider (IdP) that your company uses. In all cases, however, the process requires you to provide your IdP with one or more URLs from Vidyard in exchange for an X.509 Certification and an Endpoint URL.

If you need help understanding how to to create or assign users to a SAML app in your IdP, contact your SSO vendor for assistance.

1. Open the Access menu, then select Manage to change access settings
2. Select Single Sign On (SSO) users
3. Click on Add Profile to configure SSO with your identity provider 
   
4. Provide your IdP with the relevant URLs from Vidyard
   • Note that only some URLs may be required, depending on your IdP. In other cases, all URLs may be required.
5. Obtain the X.509 Certificate and SAML Endpoint URL from your IdP and enter them into the fields provided in Vidyard.
6. Select Apply to finish

When finished, make sure to assign the necessary users in your IdP to the SAML application that you've created for the sharing page. This will allow users to successfully sign in and watch videos that have been set to use SSO as a secure platform.

Set your videos to use SSO as a secure platform

Once you've finished setting up SSO on your sharing page, enable the secure platform setting on the video(s) that you want to restrict to internal viewers.

The secure platform setting ensures that the video(s) cannot be accessed outside of the sharing page and that viewers must first sign in to your IdP before they are able to watch.

You can apply the secure platform setting to videos in 2 different ways: 

• 👉 As a default folder setting (allows you to secure videos with SSO across 1 or more folders in the account)
• 👉 On an individual video (allows you to secure a specific video with SSO)