.png){kind=logo}
Security configuration
- 22 Mar 2024
- Print
Security configuration
- Updated on 22 Mar 2024
- Print
Article summary
Did you find this summary helpful?
Thank you for your feedback
Description
This feature is not available if you have Single sign-on enabled.
Referrer protection prevents your CorporateTube page from being hotlinked or embedded by another website.
If you want to prevent users from accessing your CorporateTube page via the direct link, you can define a list of referrer domains to protect direct access.
Referrer protection protects CorporateTubes embedded in iframes as well as CorporateTubes that are not embedded.
Referrer Domain
To permit access only to browsers referred from specific domains, toggle Referrer Protection in the admin area.
There, you can add either a fully-qualified domain, such as www.movingimage.com, or a wildcard domain such as *.movingimage.com.
In the second case, note that the wildcard * implies any subdomain of movingimage.com. The value entered is validated and permitted.
You should not enter the protocol http:// or https://. Invalid entries will be highlighted with a red border:
If you want to add more than referrer domain to the permitted list, please use a comma separator. You can add as many referrer domains as you wish.
The referrer protection feature cannot be used if single sign-on has been enabled for your CorporateTube account. The feature will be greyed out:
Watermark
To use this feature, an additional keycloak mapper is required and must be passed in a SAML attribute.
To create this mapper in the IDP configuration, please contact movingimage Professional Services.
Once an additional keycloak mapper has been created and passed in a SAML attribute, you can enable the watermark feature.
This security feature has been automatically enabled for all SSO-enabled CorporateTubes; the dynamic overlay helps prevent unauthorized sharing, ensuring your content is secure and traceable.
The watermark is displayed at the top of the player in a translucent text (highlighted in red).
Single Sign-on for Admins
Description
If you have Single-Sign-On administration rights in CorporateTube, you can access the SSO Administration area directly from your CorporateTube account.
Here, you can set specific SSO users rights, channel access as well as determine their start channel.
Specifically, this is done through the groups they are assigned to.
Navigation
In CorporateTube, click on the top-right corner to see a dropdown list and select "Administration".
The administration area for CorporateTube comprises three main areas:
Area | Description |
|---|---|
Rights | Assign a specific group the right to upload content |
Channel access | Defines which channels a group can access |
Start channel | Determines the start page channel displayed in your CorporateTube’s home page for each specific group in your account |
Rights
To restrict the right to upload videos directly from CorporateTube to a specific group of users, create a new group.
rights.png "CorporateTube Administration Guide > Single Sign-on for Admins > CT_admin)rights.png")
Give the group the same name assigned to them in the group attribute of the active directory of the company.
As an example, use the name "CT_Uploader". Select the "Video upload" right and click on "Save".
Now, only users with this group attribute are able to upload videos.
Channel Access
This feature enables you to limit channel access to a specific group or groups.
You can either create a new group here, or use the group created in the previous example.
For each group, determine which channels the desired group should have access to:
After selecting the channels, click the "Save" button at the top-right corner.
Note that a user must belong to one of these groups to access to the content. Users that do not belong to any of these groups will not be able to access any of your CorporateTube content.
Start Channel
This feature enables you to set the start channel for users of a specific group.
You can add a new group here or use an existing group.
If you are adding a new group, give it the same name assigned to them in the group attribute of the active directory of the company.
Click on "Add group".
Then, enter the channel ID of the desired channel. This channel ID is found at the end of the browser URL of your CorporateTube or VideoManager Pro account.
After entering the channel ID, click the "Save" button at the top-right corner.
Whenever users from this group logs into this CorporateTube, they will be redirected to the corresponding channel.
Consent Configuration
This option allows you to enable and add a Usercentrics based consent banner in your CorporateTube.
You can add the “Settings Id” of your Usercentrics instance and the corresponding consent banner would be shown.
Click on Consent Enabled, enter your ‘SettingsId’, and save the settings. The ‘settings Id’ can be found in the ‘Implementation’ section of usercentrics admin portal.
If you would like have all the consent related assets loaded from the same domain, please add usercentrics.movingimage.com to list of services domains.
Was this article helpful?