How do I set up SSO using OneLogin with Enterprise Video Streaming?

Introduction

This document helps you connecting OneLogin and an Enterprise Video Streaming account to have SAML based SSO. It assumes that you already have a OneLogin and EVS account so it doesn't cover the account registrations.

OneLogin Settings

1. Login to your account at https://www.onelogin.com
2. Go to Apps > Add Apps
3. Search for and add the app called IBM Cloud Video
4. Add and save the app
5. Go to the Configuration tab in the app settings and set the following credentials:

    Channel Url

   • This should be the channel URL where you would like to allow your users to authenticate.
   • The URL is https://align.ustream.tv/channel/[YOUR CHANNEL NUMBER]
   
6. Go to the SSO tab to obtain the values to populate into IBM Video Streaming interface. Do not close this window it will be needed later.

Enterprise Video Streaming SAML SSO Settings

1. Login to your account at https://www.ustream.tv/login
2. Go to the dashboard, select Integrations & Apps choose Security settings from the menu or follow this link: https://www.ustream.tv/dashboard/integrations/security
3. Choose Service Provider Initiated SSO from the two options.
4. Map the values as follows from the OneLogin SSO settings page:
   • Name in OneLogin = Name in IBM Video Streaming
   • Issuer URL = Entity ID
   • Certificate = Certificate
     • To get the Certificate from OneLogin click on Certificate > View Details, copy certificate to get the actual certificate.
   • SAML 2.0 Endpoint (HTTP) = Login URL
   • SLO Endpoint (HTTP) = Logout URL (this is optional)