Importing Roles

When Mediasite is integrated with a SAML Identity Provider (IdP) like AD FS, Shibboleth, Okta, or Google, the easiest way to secure content is to create a Security Role that maps to an Attribute or Claim being passed to Mediasite from the Identity Provider.

The Attributes made available to Mediasite will depend entirely on how your IdP is configured.  For example, some organizations will only send Mediasite general information about the user (e.g. Student, Faculty, Staff, Employee).  Other organizations may send more detailed information (e.g. Econ 100 – Section 1 Student).

Mediasite Role Cache

Every time a user logs into Mediasite, the Attributes (e.g. Student, Employee, Faculty, Staff) passed to Mediasite from the Identity Provider (IdP) are saved within Mediasite to a temporary location called the Role Cache.  Once the Attribute has been cached, Mediasite Administrators can quickly Import this Role into Mediasite for future use.

Once the Role is created, it can be used to restrict access to different aspects of Mediasite.

Creating the Roles begins on the security tab of the Management Portal.

1. Select Roles and then the Add New button
2. Click: Add From Role Cache Tab
3. All of the Roles that have been cached will be listed below
4. Select the group you would like to add as a role
5. Click Import

Now that the role has been imported, you can see that the Role is now part of Mediasite.