Cloud Streaming - OneLogin SAML V2 Setup Guide

Step 1 – Configure OneLogin SAML Application

Note: You may need to change the PreferredAuthentication value under the Portal Settings to saml in order to allow OneLogin users to launch the application from within OneLogin.

 

SSO Configuration

The OneLogin KB document linked below provides guidance for setting up SAML Single Sign on.

https://onelogin.service-now.com/support?id=kb_article&sys_id=b2c91143db109700d5505eea4b9619d5

 

Parameters Tab

The Parameters tab will allow you to map attributes to be passed during SAML authentication/authorization.

The first section allows you to specify whether the credentials are solely admin-configured, or shared amongst all users. In most cases, you can keep the Configured by admin default option.

Selecting one of these fields opens a small configuration pane, as seen below, where you can assign which value from OneLogin will be associated with the field in the application.

On the Parameters Tab add the following Fields:

• First Name
• Last Name
• Email
• Roles

Note:  The Roles attribute may be very useful to distinguish Students from Instructors in the Role Mapping of your Swank streaming portal. You may add these attributes as needed. 

Access Tab

The Access tab contains controls that allow you to assign an app policy to roles. You can add role-specific policies, or apply a default policy across all users.

In the Policy section, select the policy you want to associate with the application.

In the Roles-Based Policy section, make a policy exception for the users in a specific role.

In the Roles section, choose the roles you want to associate with the application. Note: This will be the SAML attribute that will be used to map your staff to the appropriate role in Swank Digital Campus.

Step 2 – Configure Digital Campus SAML Authentication

1. Refer to the following article to continue setup in the Swank Cloud Streaming Admin:
   Configuring Swank Cloud Streaming SAML Authentication