Before configuring SAML Authentication with auto-provisioning, it is highly recommended that you first decide which SAML attributes you want to map to your VidyoPortal user account attributes. These mapping decisions become your SAML auto-provisioning scheme during the Edit Attributes Mapping step in the following procedure. For more information, see Understanding SAML authentication with auto-provisioning and Understanding the VidyoPortal user account attributes (SAML).

You can still manually create users even if you configure SAML authentication with auto-provisioning. However, these manual users do not automatically update attributes from your IdP server.


To configure SAML authentication with auto-provisioning:

  1. Log in to the Admin portal using your Admin account.

    For more information, see Logging in to the Admin interface.

    The Users page displays by default.

  2. Click the Settings tab.

    The License page displays by default.

  3. Click Authentication on the left menu.

    The Authentication page displays.

  4. Select SAML from the Authentication Type drop-down.

  5. Enter the following information:



    • Enter your IdP Metadata XML in the Identity Provider (IdP) Metadata XML
      Your SAML administrator should be able to provide you with the IdP Metadata.
    • Select MetaIOP or PKIX validation from the Security Profile options.
      PKIX is the most common profile used.
    • Select MetaIOP or PKIX validation from the SSL/TLS Profile options.
      Select PKIX if you’re not certain of which profile to choose.
    • Select Yes or No from the Sign Metadata options.
    • Select SAML from the SAML provisioning type drop-down.
    • Click Edit IdP Attributes Mapping and configure your IdP attribute to be used for mapping your user accounts.

      Each row on the SAML IdP Attributes Mapping pop-up represents an attribute. For each attribute, there is an associated Portal Attribute Name, SAML IdP Attribute Name, Default Value, and Value mapping (where applicable). These configurations become the rules telling the system what values to populate in specific user account fields when the new account is created.

      Changes made to Attribute Mapping information also affect the View Service Provider (SP) Metadata XML information.

      You should spend some time analyzing your VidyoPortal user account attributes in order to decide which SAML IdP attributes you want to associate with them before actually making the configurations on the SAML IdP Attributes Mapping pop-up. For more information, see Understanding the VidyoPortal user account attributes (SAML).

  6. Click View Service Provider (SP) Metadata XML to view your service provider metadata XML for your SAML-enabled tenant.

    You must provide this metadata XML to your IdP administrator to complete the SAML configuration on your tenant.

  7. Click Save.
Was this article helpful?
0 out of 0 found this helpful

0 Comments

Follow
Please sign in to leave a comment.