January 2025: New Authentication System - Actions Required

We are reaching out to inform you about important updates coming to our Cloud Streaming products. These changes are designed to enhance performance, improve security, and enable new features. To ensure uninterrupted access, please review the following guidance and take any required actions.

---

Actions Required:

1. Ensure all user accounts have a valid email address for password support!
   
2. Transition to use an email address in the Username and Email fields - going forward, usernames will be deprecated.
3. Verify firewall permissions:
   • Allow traffic to streaming-identity.swankmp.net
   • We strongly recommend adding a wildcard rule for *.swankmp.net

---

 

Upcoming Changes:

We will implement a new authentication system supporting IP Authentication, UserID/Password, and Single Sign-On (SSO). These changes will be introduced in the January 14, 2025 release, with portal-specific rollouts occurring in waves through January and February 2025.

Highlights by Authentication Type:

1. IP Authentication:

• No significant changes for customers using this method.

2. UserID/Password Authentication:

• Self-Service Password Management: Users will manage their own passwords through registration and “Forgot Password” workflows.
• Email as UserID: Usernames will be deprecated, with email addresses becoming mandatory.
• New Password Policy: Minimum of 12 characters, including uppercase, lowercase, numbers, and special symbols (enforced only on new or updated passwords).
• New Login URL: The login page will move to: https://streaming-identity.swankmp.net/.

3. Single Sign-On (SSO):

• Supported Standards: SAML v2.0 and OIDC/OAuth 2.0.
• Configuration Update Required: Existing SAML and Google OAuth configurations will be deprecated and your Identity Provider(s) must be updated to point to our new Identity Service.

4. Machine Clients - New!

• Through OIDC, we now support “machine clients” for API partners. This allows for more secure Client ID and Client Secret management, separate from UserID/Password workflows. We will contact relevant partners in the coming months to assist with registration and transition.