Single Sign-On in Mediasite using Joomla IDP allows users to log in to Mediasite using Joomla by configuring Mediasite as a Service Provider (SP) and Joomla as a SAML Identity Provider (IDP). This guide will take you through a step-by-step process to configure SSO between the two platforms.

What is Mediasite?
Mediasite is a video content management and lecture capture platform designed for educational institutions, businesses, and healthcare organizations. It allows users to record, manage, and distribute video content, including lectures, presentations, training sessions, and conferences. Key features of Mediasite include live streaming capabilities, automated recording workflows, video editing tools, interactive viewer engagement options, and analytics to track viewer engagement and performance. Mediasite aims to enhance learning and knowledge sharing through secure and scalable video solutions, supporting both in-person and remote learning environments.

Pre-requisites: Download And Installation

Download

Free Trial

Install Joomla IDP Plugin

• Download the zip file for the miniOrange Joomla IDP plugin.
• Log into your Joomla site’s administrator console.
• From left toggle menu, click on System, then under Install section click on Extensions.

• Upload the downloaded zip file to install the Joomla IDP plugin.

• Installation of the plugin is successful. Now click on Start Using miniOrange SAML IDP Plugin to configure miniOrange Joomla IDP plugin.

Steps to configure Mediasite SSO with Joomla as IDP.

1. Configure Mediasite as Service Provider

• Go to the miniOrange Joomla IDP plugin, navigate to the Identity Provider tab.
• Here, you can find the Identity Provider Metadata XML URL/File or endpoints like IDP Entity ID, SAML Login URL, SAML Logout URL (Premium Feature), and Certificate for SP configuration. Download the XML Metadata by clicking on the button as shown below.

• In a new browser window, login to your Mediasite Management Portal as Admin.
• Click on SAML 2.0 Configuration under that enter required endpoints from the IDP Metadata tab of plugin.

Entity ID	Copy and paste IDP Entity ID/Issuer
Use the NameID in Assertion Subject as the UserID	checked
Role Attribute Names	Roles
Role Attribute Name Format	This field should be left blank.
Automatically create User Profiles on Login to My Mediasite or Managment Portal	Checked
Display Name Attribute Name	display Name
Role Attribute Name Format	This field should be left blank.
Email Address Attribute Name	email.
Email Address Attribute Name Format	This field should be left blank.
Cache Duration	Keep default value.

• Enter the required endpoints in Service Provider Message Signing as suggested below.

Certificate Source	Mediasite Self-Signed Certificate
Signing/Encryption Key Length	2048
Message Signing Hash	SHA-256
Current Expiration Date	This is automatically generated from the expiration duration setting.
Expiration Duration	The time in years and days that the SP metadata will be valid.

• Save the Configuration page, so that the Current Expiration Date is popluated.
• Under the Identity Provider Settings enter the values as suggested below.

Entity ID	Copy and paste IDP Entity ID/Issuer from the IDP plugin.
Metadata URL	Copy and paste Metadata URL from the IDP plugin.
Display Name	Joomla
Automatically redirect to provider during login	Checked


• Click on Save.

2. Configure Joomla as Identity Provider

• Now go to Components miniOrange Joomla IDP Service Provider

• Navigate to the Service Provider tab and complete the fields for Service Provider Name, SP Entity ID or Issuer, ACS URL, and NameID Format. Refer to this step to get Service Provider details. Fill in the other fields according to your requirements. Click on Save.

Enter the following values:

Service Provider Name	Choose appropriate name according to your choice.
SP Entity ID or Issuer	Service Provider Entity ID.
ACS URL	SP Assertion Consumer Service URL.
X.509 Certificate (optional) [For Signed Request]	Paste certificate value you copied from the Metadata file.
NameID Format	Select urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress.
Assertion Signed	Checked.


• Now click on Advance Mapping tab. Select the NameID Attribute and then click on Save Button.


You have successfully completed your miniOrange SAML 2.0 IDP configurations.

3. Attribute Mapping (Premium Feature)

• In the miniOrange Joomla IDP plugin, navigate to the Attribute Mapping tab.
• Here, you can configure Custom attribute mapping and also add additional User Attributes.

You have successfully configured Single Sign-On with Mediasite as Service Provider and Joomla as Identity Provider. If you require any further support or, if you are facing any difficulty please mail us on joomlasupport@xecurify.com

Free Trial

If you would like to test out the plugin to ensure your business use case is fulfilled, we do provide a 7-day trial. Please drop us an email at joomlasupport@xecurify.com requesting a trial. You can create an account with us using this link.

Additional Resources.

• What is Single Sign-On (SSO)
• What is SAML?
• Additional SAML IDP guides
• Frequently Asked Questions (FAQs)