Cloud Streaming - Google SAML V2 Setup Guide

Step 1 – Configure Google SAML Application

1. Sign into the Google Admin Console (admin.google.com)
2. Navigate to Apps / Web and mobile apps
3. Click Add App and select Add custom SAML app in the drop down
   
   
4. In the App details screen. add Digital Campus in the App name field
   
   
   
5. In the Google Identity Provider Details screen, under Option 1: Download IdP metadata click Download Metadata and save for a later step, then click Continue
   
   
   
6. In the Service provider details page, Enter the following information:
   • ACS URL = https://digitalcampus.swankmp.net/saml/ReceiveSingleSignOn
   • Entity ID = https://digitalcampus.swankmp.net
   • (When copying and pasting this info, make sure there is no trailing "/" or spaces on the G suite side. This will result in errors)
   • Check Signed response
   • Name ID format = UNSPECIFIED
   • Name ID = Basic Information > Primary email
     
     Click Continue
     
     
7. On the Attributes Screen click ADD MAPPING and enter the details below. Renaming the attributes to the urn:oid standard will allow the streaming portal to identify the attribute and auto populate these required fields for instructor/admin accounts.
   • Google Directory attributes: --> App attributes:
   • Required
     • First Name --> urn:oid:2.5.4.42
     • Last Name --> urn:oid:2.5.4.4
     • Primary email --> urn:oid:0.9.2342.19200300.100.1.3
   • Suggested
     • Organizational Unit Path --> ou
       Note:  Organizational Unit Path may be very useful to distinguish Students from Instructors in the Role Mapping of Digital Campus. You may add these attributes as needed.  These fields are in the Employee Details Category in GSuite.
   • Click Finish
8. User access should be enabled for the appropriate organizational units.
   1. Access can be modified under Apps > Web and mobile apps 
   2. Click on the Swank SAML App you created to open for editing. 
   3. Expand the user access section by clicking the expansion icon in the upper right corner. 
   4. You can turn on for everyone to test initially and if desired you can scale back access later.

   

Step 2 – Configure Digital Campus SAML Authentication

1. Refer to the following article to continue setup in the Swank Cloud Streaming Admin:
   Configuring Swank Cloud Streaming SAML Authentication

If you are having issues authenticating after your configuration is complete, please refer to the following guide: Cloud Streaming - SAML Google SAML V2 Troubleshooting – Swank Motion Pictures, Inc.