Kaltura MediaSpace Setup Guide. Version: 5.0

Transcription

1 Kaltura MediaSpace Setup Guide Versin: 5.0

2 Kaltura Business Headquarters 5 Unin Square West, Suite 602, New Yrk, NY, 10003, USA Tel.: Cpyright 2013 Kaltura Inc. All Rights Reserved. Designated trademarks and brands are the prperty f their respective wners. Use f this dcument cnstitutes acceptance f the Kaltura Terms f Use and Privacy Plicy.

3 Cntents Preface... 6 Abut this Guide... 6 Audience... 6 Dcument Cnventins... 6 Related Dcumentatin... 7 Sectin 1 Understanding the MediaSpace Setup... 8 Enabling User Permissins Prerequisites... 8 Understanding Cntent Cllectins... 8 Understanding Categries... 8 Understanding Channels... 8 Categries vs. Channels... 9 Understanding Rles and Permissins fr Categries and Channels... 9 Understanding Applicatin Rles Mdifying Applicatin Rle Names Assigning Applicatin Rles t Multiple Users in Bulk Understanding Entitlement Permissins Understanding Rles and Permissins Sectin 2 Setting up MediaSpace Setting up MediaSpace Cntent in the KMC Uplading MediaSpace Cntent Setting up MediaSpace Categries in the KMC Adding Cntent t yur MediaSpace Categries Adding Members and Cntributrs via the KMC Setting up MediaSpace Channels Displaying Channels in MediaSpace Setting Permissins fr Creating a MediaSpace Channel Assigning MediaSpace Cntent t Channels Assigning User Permissins t MediaSpace Channels Assigning User Permissins t MediaSpace Channels in the KMC Assigning Managers t a MediaSpace Channel Assigning User Permissins t a Channel in MediaSpace Setting up MediaSpace t Run n HTTPS Sectin 3 Authenticating and Authrizing Users in MediaSpace Scenari 1: Authenticatin and Authrizatin Are Managed in Organizatinal Systems Scenari 2: Authenticatin and Authrizatin are Managed by Kaltura Scenari 3: Authenticatin is Managed in an Organizatinal System, Authrizatin is Managed by Kaltura Enabling Cmmn Lgin Cnfiguratins Enabling Authenticatin Methds Enabling Authrizatin Methds Kaltura MediaSpace Setup Guide 3

4 Cntents Cnfiguring LDAP Authenticatin and Authrizatin Cnfiguring SSO Gateway Authenticatin and Authrizatin Cnfiguring Header Authenticatin Cnfiguring Kaltura Authenticatin and Authrizatin fr MediaSpace Sectin 4 Organizatinal Strategy fr MediaSpace Entitlements Terminlgy Planning Cnsideratins Channel Management Types Creating Channels in MediaSpace by Users Creating Channels Centrally by Administratrs Creating MediaSpace Channels in Bulk Creating MediaSpace Channels Individually Assigning Permissins and Entitlements Setting Up Members and Permissins Manually in MediaSpace Setting Up Permissins Centrally in Bulk Setting Up Permissins Individually Autmatically Updating Permissins Deleting MediaSpace Channels Deactivating Channel Memberships Setting Up the Initial Add Members Aut-Cmplete List Updating the Add Members Aut-Cmplete List Sectin 5 Setting the Hme Page Cnfiguring yur Hme Page Sectin 6 Custmizing the Lk and Feel Chsing a Different Included Style Uplading yur Own Custm Style Sectin 7 MediaSpace Administratin: Actins and Cnfigurable s User Management Cnfiguratin Management: Glbal Applicatin Client Rles Auth Gallery Player Widgets Metadata Header Navigatin Categries Channels Debug Mderatin Cnfiguratin Management: Mdules Kaltura MediaSpace Setup Guide 4

5 Cntents Addcntent Addtplaylists Btswatch Captins Cmments Cssuplad Custmdata ntificatins Embed Embedplaylist Facebk Headermenu Hme Oembed Publish Related Screencapture Sidemymedia Sideplaylists Categry Mdules Channel Mdules Entry Type Mdules Kaltura MediaSpace Setup Guide 5

6 Preface This preface cntains the fllwing tpics: Abut this Guide Audience Dcument Cnventins Related Dcumentatin Abut this Guide This dcument details the setup required fr Kaltura MediaSpace (KMS) Versin 5.0 fllwing installatin r upgrade. The dcument describes hw t set up yur site structure, preppulate Kaltura MediaSpace cntent, assign user permissins, and implement authenticatin and authrizatin. NOTE: Yu perfrm sme setup steps in the Kaltura MediaSpace Administratin Area and in the Kaltura Management Cnsle (KMC). NOTE: Please refer t the fficial and latest prduct release ntes fr last-minute updates. Technical supprt may be btained directly frm: Kaltura Supprt. Cntact Us: Please send yur dcumentatin-related cmments and feedback r reprt mistakes t [email protected]. We are cmmitted t imprving ur dcumentatin and yur feedback is imprtant t us. Audience This dcument is intended fr Kaltura MediaSpace site administratrs. Dcument Cnventins Kaltura uses the fllwing admnitins: Nte Wrkflw NOTE: Identifies imprtant infrmatin that cntains helpful suggestins. Kaltura MediaSpace Setup Guide 6

7 Preface Wrkflw: Prvides wrkflw infrmatin. 1. Step 1 2. Step 2 Related Dcumentatin In additin t this guide, the fllwing prduct dcumentatin is available: Kaltura MediaSpace Kaltura Management Cnsle (KMC) User Manual Kaltura s Entitlement Infrastructure Infrmatin Guide Kaltura s Entitlement Infrastructure Bulk Services Kaltura MediaSpace Setup Guide 7

8 SECTION 1 Understanding the MediaSpace Setup Kaltura MediaSpace features fine grained gvernance rules that grant specific permissins t cntent n the MediaSpace site. T explain yur ptins, this dcument describes the different site sectins, rles, and permissins that yu can cnfigure fr MediaSpace. This dcument fcuses n setups that include user permissins, referred t as entitlement enabled. T start learning abut MediaSpace, refer t the Kaltura MediaSpace User Manual, which describes channels and user permissins in terms f site features. Enabling User Permissins Prerequisites Cntact yur Kaltura Prject/Accunt Manager t cnfirm that the fllwing prerequisites are implemented: Entitlement services are enabled and Default Entitlement Enfrcement is set t true in yur accunt settings. (Optinal) The Like feature is enabled in yur accunt settings. A rt categry is set up fr MediaSpace in the KMC (see T set up a MediaSpace categry tree in the KMC.) Assigning user permissins usually is handled in bulk using a cmma-separated value (CSV) file. T learn mre abut the End-User Entitlements CSV, refer t the End-User Entitlements CSV. Understanding Cntent Cllectins Cntent cllectins in MediaSpace are defined as either categries r channels. Yur MediaSpace instance can include ne r bth. Understanding Categries Categries represent a centrally curated structure and hierarchy that is available frm the MediaSpace navigatin side panel. Media can be rganized arund specific tpics in either a hierarchal r a flat navigatin layut. When MediaSpace is used as a cmpany/institutin-wide media prtal, categries usually are shared with the entire rganizatin and als may be available t the public n the web. Categries define the taxnmy and hierarchical structure f yur MediaSpace site. Yu can access categries thrugh the Navigatin icn and brwse yur cntent accrding t the categries they are cntained in. Each categry pens up the list f sub-categries that are pre-cnfigured by yur accunt administratr. Understanding Channels Channels are media cllectins that can be accessed by a subset f users (r all authenticated users). Channels can be created and managed by authrized MediaSpace users r can be prvisined centrally by a KMC admin. Kaltura MediaSpace Setup Guide 8

9 Understanding the MediaSpace Setup Categries vs. Channels What are they? Wh can create? Where d they appear? Optins Categries Centrally curated hierarchical structure that defines the taxnmy f yur site KMC user nly Navigatin panel Entitlements Mderatin Grup Offline Synchrnizatin Inherit members frm parent categry Imprt members frm parent categry Channels User generated cllectins that are persnally managed Any MediaSpace user (cnfigurable accrding t applicatin rles) My Channels All Channels Inside a categry Entitlements Mderatin Grup Offline Synchrnizatin Understanding Rles and Permissins fr Categries and Channels Entitlement permissins are used t assign permissins t categries r channels (fr example, enabling a user t add cntent t a channel). Applicatin Rles apply glbally, while entitlement permissins are cntextual. An example f cntextual channel permissins is a user with Manager permissins fr ne channel and lwer-level Cntributr permissins fr anther channel. Fr a user t perfrm an actin that a permissin allws, the actin must be allwed by the user's applicatin rle. Therefre, yu must ensure that a user with a permissin f Cntributr r higher (see Understanding Permissins) is assigned a rle f privateuplader r higher (see Applicatin Rles). Otherwise, the user is nt able t uplad cntent t MediaSpace despite the permissin that entitles the user t cntribute cntent. A Channel Manager can assign permissins in MediaSpace. The channel manager selects the kind f access that users have fr the channel. If the channel type is restricted r private, the channel manager adds members and assigns member permissins. T learn mre, refer t the Kaltura MediaSpace User Manual. Understanding Privacy Types MediaSpace supprts the fllwing privacy types fr categries: Open: All users are entitled t access the categry (annymus r authenticated, depending n the cnfiguratin f yur site) but nly specific users are entitled t cntribute cntent Restricted: All authenticated users are entitled t access the categry, but nly specific users are entitled t cntribute cntent. Private: Only specific users are entitled t access the channel and t cntribute cntent. MediaSpace supprts the fllwing privacy types fr channels: Open: All authenticated users are entitled t access the channel and cntribute cntent. Restricted: All authenticated users are entitled t access the channel, but nly specific users are entitled t cntribute cntent. Private: Only specific users are entitled t access the channel and t cntribute cntent. Kaltura MediaSpace Setup Guide 9

10 Understanding the MediaSpace Setup Channel type definitins are displayed in MediaSpace under Channel Edit>Details: KMC entitlement definitins are displayed in the KMC under Cntent>Categries>Edit Categry windw>entitlements tab: NOTE: If mdificatins are made in the KMC that d nt crrespnd t ne f the channel types, MediaSpace behavir will fllw the KMC definitin, nt the designated type. Fr mre infrmatin, refer t Hw t set entitlement settings in the KMC. Understanding Applicatin Rles MediaSpace applicatin rles apply glbally and include: annymusrle Can brwse yur site annymusly until trying t access pages/actins Kaltura MediaSpace Setup Guide 10

11 Understanding the MediaSpace Setup that require lgin: My Media, My Playlists, and Add New. viewerrle Can brwse public galleries Is nt authrized t uplad new cntent Des nt have a My Media page privateonlyrle Can uplad cntent t My Media Cannt publish t galleries Can add media adminrle Can cntribute cntent t all categries Can uplad cntent unmderatedadminrle Can uplad cntent and bypass mderatin (when mderatin is enabled fr an accunt) MediaSpace applicatin rles are backward cmpatible. Mdifying Applicatin Rle Names Yu can mdify MediaSpace applicatin rle names t match yur institutinal terminlgy. T mdify MediaSpace applicatin rle names On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Rles tab. Mdify the label fr ne r mre rles, and click Save. Assigning Applicatin Rles t Multiple Users in Bulk Yu can assign applicatin rles t multiple users with a bulk actin. Yu use an End Users CSV that includes an ptin t assign rles. T uplad an End Users CSV D ne f the fllwing: In the KMC, uplad the End-Users CSV. Refer t the End-Users CSV - Usage and Kaltura MediaSpace Setup Guide 11

12 Understanding the MediaSpace Setup Schema Descriptin. On the User Management panel f the Kaltura MediaSpace Administratin Area: - Click Submit CSV. - Click Chse File t select the CSV file, and click OK. Understanding Entitlement Permissins While an applicatin rle applies t yur entire MediaSpace site, sme permissins may be categry r channel-specific. Yu set user permissins t a specific cntent cllectin by applying the fllwing permissin levels: Member: Can access a channel r categry but cannt add new cntent Cntributr: Can add cntent t a channel r categry Mderatr: In additin t the Cntributr permissin, can mderate cntent. Manager: In additin t the Cntributr permissin, can mderate cntent and access settings, including change metadata, edit members, change appearance, and delete channel. See Understanding Rles and Permissins. In channels: All permissin levels are relevant fr channels. In galleries: Only the Cntributr and Member permissin levels are relevant t galleries. Assigning a list f users as Members enables the users nly t access a gallery. Assigning a list f users as Cntributrs enables the users t access a gallery and add media. (A user with the Admin applicatin rle als can add media.) Understanding Rles and Permissins Wh can uplad cntent t MediaSpace? A user with an applicatin rle f privateonlyrle and higher (adminrle, unmderatedadminrle) can uplad cntent t MediaSpace. Wh can view categries? By default, categries can be accessed by all authrized users. Kaltura MediaSpace Setup Guide 12

13 Understanding the MediaSpace Setup When Annymus mde is enabled, pen categries can als be viewed by annymus users. T enable Annymus mde On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Auth tab. Under allwannymus, select Yes and click Save. Wh can view r cntribute cntent t a categry/channel? The fllwing table describes the different scenaris depending n yur KMS cnfiguratin and entitlements settings: Privacy Type Actin Categry Channel Open View Annymus + (if KMS is enabled fr annymus mde) Cntribute Cntributr + adminrle + Any Authenticated User Any Authenticated User Restricted View Any Authenticated User Any Authenticated User Cntribute Cntributr + Cntributr + Private View Member + Member + Cntribute Cntributr + Cntributr + Hw des a user becme a manager? A user can becme a manager in the fllwing ways: The End-User Entitlements CSV includes fields fr assigning a manager, cntributrs, and member permissins fr each user and channel. An authrized user wh creates a channel is assigned as the channel wner with managerial rights. An wner can add additinal managers, cntributrs, and members t a channel. Hw des a user jin a channel? An end user cannt jin a channel. The sys-admin r channel manager must authrize the user. An authenticated user can access channels that are Open r Restricted. Wh can create a channel? A user with a rle that is defined as a channel creatr can create a channel. Yu define the user rles that can create a channel. See Setting Permissins fr Creating a MediaSpace Channel. Wh can delete a channel? The fllwing are authrized t delete a channel: Frm MediaSpace: The channel wner/manager Frm the KMC: A KMC admin Kaltura MediaSpace Setup Guide 13

14 SECTION 2 Setting up MediaSpace This sectin describes the fllwing tpics: Setting up MediaSpace Cntent in the KMC Uplading MediaSpace Cntent Setting up MediaSpace Galleries in the KMC Setting up MediaSpace Channels Assigning User Permissins t MediaSpace Channels Setting up MediaSpace t Run n HTTPS Setting up MediaSpace Cntent in the KMC T set up a MediaSpace categry tree in the KMC 1. In the KMC, create a MediaSpace rt categry. a. Select the Cntent tab and then select the Categries tab. b. Click Add Categry. c. On the New Categry windw, select the psitin f the rt categry and save yur new categry. d. In the New Categry windw, enter metadata fr the new categry and click Save. Kaltura MediaSpace Setup Guide 14

15 Setting up MediaSpace 2. In MediaSpace, define the rt categry. a. On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Categries tab. b. Under rtcategry, select the categry that yu created, and click Save. 3. In the KMC, verify yur rt categry and sub-categries. a. Select the Cntent tab and then select the Categries tab. b. Verify that the rt categry is displayed with new sub-categries. Kaltura MediaSpace Setup Guide 15

16 Setting up MediaSpace NOTE: The Archive categry is reserved fr future versins. The Private categry cntains all cntent upladed t the MediaSpace site that has nt been published t galleries and channels. D nt change the Private categry settings. 4. In the KMC, verify that the rt categry is assigned a Privacy Cntext. A Privacy Cntext is defined during MediaSpace installatin r using the KMC. Refer t Hw t add Entitlements t Categries. a. In the KMC, select the Cntent tab and then select the Categries tab. b. In the Categries table, click the rt categry name. c. On the Edit Categry windw, select the Entitlements tab. d. Under Privacy Cntext Label, cnfirm that a value is displayed. Uplading MediaSpace Cntent T uplad initial cntent fr MediaSpace in the KMC In the KMC, select the Uplad tab and then d ne f the fllwing: Click Uplad frm Desktp. Use this ptin t uplad a small number f files. Under Submit Bulk, select Entries CSV/XML. Use this ptin t uplad a large number f files. Using this ptin, yu als imprt metadata such as categries and tags. Kaltura MediaSpace Setup Guide 16

17 Setting up MediaSpace T learn mre abut uplading and ingestin, refer t the Kaltura Management Cnsle (KMC) User Manual. Setting up MediaSpace Categries in the KMC After yu set up a MediaSpace categry tree, yu can create categries and channels. T learn mre abut Creating and Managing Cntent Categries, see Hw t Create and Manage Cntent Categries? T add MediaSpace categries manually in the KMC In the KMC, select the Cntent tab and then select the Categries tab. Click Add Categry. Add a categry under [MediaSpace rt]>site>galleries, and save yur new categry. T create MediaSpace categries in bulk in the KMC In the KMC, select the Uplad tab and, under Submit Bulk, select Categries CSV. Specify the path fr the gallery categries under [MediaSpace rt]>site>galleries. T specify the rder f MediaSpace gallery categries in the KMC 1. By default, categries in MediaSpace are displayed by their creatin date (the mst recent appears last). In the KMC, select the Cntent tab and then select the Categries tab. Kaltura MediaSpace Setup Guide 17

18 Setting up MediaSpace 2. Click galleries in the Categries table t pen the Edit Categry windw. 3. On the Edit Categry windw, select the Sub Categries tab (displayed nly when there is mre than ne sub-categry): Specify the rder f the sub-categries using the Up and Dwn arrws, and click Save. Repeat fr additinal sub-categry levels under galleries. T set the wner f a categry manually in the KMC 1. By default, categries in MediaSpace are added withut an wner. T delegate the management f a specific categry t a MediaSpace user and allw that user t cnfigure that categry and manage members, yu shuld assign the apprpriate MediaSpace user as the categry wner. In the KMC, select the Cntent tab and then select the Categries tab. Kaltura MediaSpace Setup Guide 18

19 Setting up MediaSpace Search fr the categry that yu want t set the wner fr, and pen the Edit Categry windw. On the Edit Categry windw, select the Entitlements tab. Yu will ntice that the Owner is nt specified Click Change. Enter the user name r user ID f the apprpriate wner fr this categry and click Save. Adding Cntent t yur MediaSpace Categries After yur categry structure is set up, yu can publish cntent t yur categries. Yu can add entries t categries in the KMC n the Uplad tab's Submit Bulk menu using the Entries CSV/XML ptin. Categries that d nt exist are created when yu submit the file. T display these categries in MediaSpace, specify the [MediaSpace Rt]>site>galleries path. T learn mre abut Assigning Cntent t Categries, refer t Hw t create Categries and Assign Entries t a Categry. T manually assign cntent t a MediaSpace categry in the KMC In the KMC, select the Cntent tab and then select the Entries tab. In the Entries table, select ne r mre entries and click Bulk Actins. Kaltura MediaSpace Setup Guide 19

20 Setting up MediaSpace 3. Select Add/Remve Categries and click Add t Categries. 4. On the Select Categries windw, under the galleries categry, select ne r mre categries and click Apply: In the Entries table, the entries are displayed fr the categry yu used as a filter. Kaltura MediaSpace Setup Guide 20

21 Setting up MediaSpace Als, see Assigning MediaSpace Cntent t Channels. T change an entry s MediaSpace cntent wner in the KMC Usually, the user wh uplads cntent in the KMC is nt the administrative cntent wner f the media entry. Refer t Hw t change the categry wner in the KMC r KMS. NOTE: The cntent wner is the user that has the manager permissin level fr this categry and can manage the categry settings frm the applicatin. Adding Members and Cntributrs via the KMC T add a user as a cntributr t a MediaSpace categry in the KMC In the KMC, select the Cntent tab and then select the Categries tab. In the Categries table, click the categry name. On the Edit Categry windw, select the Entitlements tab. Under Specific End-User Permissins, click Manage. Kaltura MediaSpace Setup Guide 21

22 Setting up MediaSpace 5. On the Specific End-User Permissins windw, click Add Users On the Add Users windw, under Permissin Level select Cntributr. On the Add Users windw, under Select End-Users start typing a user name. A list f suggestins is displayed after yu type the third character. Kaltura MediaSpace Setup Guide 22

23 Setting up MediaSpace 8. On the Add Users windw, select a user frm the suggestin list and click Save. In MediaSpace, the selected user will have the Add Media ptin fr the specified gallery. Setting up MediaSpace Channels Setting up MediaSpace channels in the KMC is similar t setting up categries. T learn abut what s unique fr channels, see Assigning User Permissins t MediaSpace Channels in the KMC. Displaying Channels in MediaSpace This sectin describes the fllwing tpics: Adding a Link t the Channels Page and My Channels in the Tp MediaSpace Navigatin Adding a Link t My Channels in the MediaSpace Header Menu Assciating Channels t Categries T add a link t the Channels page and My Channels in the tp MediaSpace navigatin On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Navigatin tab. Under pre: a. In the type menu, select Channels Page r My Channels. b. In the name field, enter the label t display. 3. Click Save t display the link in the tp MediaSpace navigatin bar. Kaltura MediaSpace Setup Guide 23

24 Setting up MediaSpace T add a link t My Channels in the header menu On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Headermenu tab. Under enabled, select Yes t enable the Headermenu mdule. Under menu: a. In the type menu, select My Channels. b. In the label field, enter the label t display. 4. Click Save t display the link in the MediaSpace header menu. Assciating Channel t Categries When yu create a channel, yu can assciate a channel t a categry. When users navigate t a categry page, they will be able t brwse the media and als the channels assciated with that categry. T enable assciating channels t categries when creating a channel 1. On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Channelcategries tab Under enabled, select Yes t enable the Channelcategries mdule. Click Save. Setting Permissins fr Creating a MediaSpace Channel See Wh can create a channel? Kaltura MediaSpace Setup Guide 24

25 Setting up MediaSpace T define a user rle with permissins t create a channel On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Channels tab. Under channelcreatr, select ne f the fllwing rles, and click Save. Sys Admin Channels can be created nly frm the KMC by the KMC admin user. viewerrle All authenticated users privateonlyrle All users with uplad permissins adminrle All users with permissin t uplad and publish t all categries unmderatedadminrle All users with permissin t uplad and publish t categries and t bypass mderatin (if mderatin is enabled) NOTE: We d nt recmmend enabling a Viewer t create channels since Viewers cannt add cntent t channels they create. When a user has permissins t create a channel, a Create Channel buttn is displayed n Channel Listing pages. Assigning MediaSpace Cntent t Channels T manually assign cntent t a MediaSpace channel in the KMC In the KMC, select the Cntent tab and then select the Entries tab. In the Entries table, select ne r mre entries and click Bulk Actins. Kaltura MediaSpace Setup Guide 25

26 Setting up MediaSpace 3. Select Add/Remve Categries and click Add t Categries. 4. On the Select Categries windw, under the channels categry, select ne r mre categries and click Apply: In the Entries table, the entries are displayed when yu filter fr a categry t which yu assigned the entries. Als see Adding Cntent t yur MediaSpace Categries. Assigning User Permissins t MediaSpace Channels T assign user permissins in bulk, use the End-User Entitlements CSV. T learn mre abut assigning end-user permissins, refer t the Kaltura Management Cnsle (KMC) User Manual. T learn mre abut entitlement services and hw they apply t MediaSpace permissins, refer t Intrductin t the Kaltura Entitlement Infrastructure. Assigning User Permissins t MediaSpace Channels in the KMC By default, a channel that yu create in the KMC is restricted t authenticated users. Handling permissin restrictins fr channels is similar t the way yu handle permissins fr galleries. See Adding Cntributrs t MediaSpace Galleries. In additin, yu perfrm the fllwing imprtant flws related t channels in the KMC: Assigning Managers t a MediaSpace Channel Assigning User Permissins t a Channel in MediaSpace Assigning Managers t a MediaSpace Channel T access channel settings in MediaSpace, a user must have Manager permissins fr the channel. T learn mre abut channel settings, refer t the Kaltura MediaSpace User Manual. T assign a manager t a MediaSpace channel in the KMC In the KMC, select the Cntent tab and then select the Categries tab. In the Categries table, click the channel categry name. Kaltura MediaSpace Setup Guide 26

27 Setting up MediaSpace On the Edit Categry windw, select the Entitlements tab. Under Specific End-User Permissins, click Manage. On the Specific End-User Permissins windw, d ne r mre f the fllwing: In the user list, select ne r mre users and change the user permissin t Manager. Click Add Users. - On the Add Users windw, under Permissin Level select Manager/Mderatr. - On the Add Users windw, under Select End-Users start typing a user name. A list f suggestins is displayed after yu type the third character. - On the Add Users windw, select a user frm the suggestin list and click Save. NOTE: A MediaSpace end user wh creates a channel can assign permissins, including adding managers and mderatrs. Assigning User Permissins t a Channel in MediaSpace Channel managers and wners can add members and change user permissins in MediaSpace. T edit channel members and permissins in MediaSpace In MediaSpace, n the Channels page r yur My Channels page, click a channel t pen the channel page, and then click Actins Edit. On the Members tab: T mdify the member's permissin level, next t the member's Permissin clumn, click the Pencil icn, select a new permissin, and click Dne. T remve the member frm channel membership, click X icn. T add a member and assign a permissin level t the new member, click Add Member, enter a user name and select a permissin, and click Add. T set a different member as the channel wner, click the Set as Owner link. NOTE: This peratin is available t current wner nly and will transfer wnership frm yu t selected member. T learn mre abut editing channel users, refer t the Kaltura MediaSpace User Manual. Kaltura MediaSpace Setup Guide 27

28 Setting up MediaSpace Setting up MediaSpace t Run n HTTPS Yu can cnfigure MediaSpace t run n HTTPS. T run MediaSpace n HTTPS D ne f the fllwing: Use HTTPS fr lgin nly. a. On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Auth tab. b. Under sslsettings, select Lgin nly and click Save. c. On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Client tab. d. Under serviceurl, enter an HTTP URL and click Save. Use HTTPS fr yur MediaSpace site. NOTE: T run MediaSpace n HTTPS, cntact yur Kaltura Prject Manager r Accunt Manager fr assistance. D nt attempt t run MediaSpace n HTTPS befre cnsulting yur Kaltura representative. Implement the fllwing prcedure when yur Kaltura representative instructs yu t d s. a. On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Auth tab. b. Under sslsettings, select All site and click Save. c. On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Client tab. d. Under serviceurl, enter an HTTPS URL and click Save. Kaltura MediaSpace Setup Guide 28

29 SECTION 3 Authenticating and Authrizing Users in MediaSpace Use the Cnfiguratin Management panel Auth tab f the Kaltura MediaSpace Administratin Area t cnfigure the authenticatin and authrizatin methds fr accessing MediaSpace cntent. Access is based n the Applicatin rle cnfigured fr the user. The fllwing scenaris are supprted: Scenari 1: Authenticatin and Authrizatin Are Managed in Organizatinal Systems Scenari 2: Authenticatin and Authrizatin Are Managed in Kaltura Scenari 3: Authenticatin Is Managed in an Organizatinal System, Authrizatin Is Managed in Kaltura Usually, bth authenticatin and rle authrizatin are set thrugh integratin with the rganizatinal identity and grup management systems (Scenari 1). Kaltura s authenticatin and/r authrizatin ptins may be useful in the cases described in Scenaris 2 and 3. NOTE: User authrizatin t channel and cntent entitlements is handled separately. Scenari 1: Authenticatin and Authrizatin Are Managed in Organizatinal Systems When des this scenari apply? Yu can use yur rganizatinal system as yur MediaSpace identity and rle authrizatin prvider when: Yu have a large-scale MediaSpace deplyment. Yu want all users t lg int MediaSpace with their rganizatinal credentials and t be authenticated by yur centralized authenticatin system. Yu can prvide access frm the MediaSpace applicatin t yur authenticatin and grup management systems. Authrizatin t access MediaSpace with a specific Applicatin Rle derive in mst cases frm user membership in rganizatinal units r grups. Wh can access MediaSpace? Only users wh are authenticated and authrized by yur systems can access MediaSpace. Users wh are nt authenticated by yur systems are denied access t MediaSpace and are nt able t lg in. What user details are stred in Kaltura? The user s identifier, Applicatin Rle, and first and last names (ptinal but recmmended) must be stred in Kaltura. After the user lgs int MediaSpace fr the first time, administratrs can view and manage the user recrd n the User Management panel f the Kaltura MediaSpace Administratin Area. The user s rganizatinal passwrd is nt saved in Kaltura. Kaltura MediaSpace Setup Guide 29

30 Authenticating and Authrizing Users in MediaSpace Can yu manually set different user details in Kaltura? Yes, yu can manually set different user details in Kaltura. After the user lgs int MediaSpace fr the first time, administratrs can manage the user recrd n the User Management panel f the Kaltura MediaSpace Administratin Area. An administratr can verride the user details (first and last name) and the user MediaSpace Applicatin Rle. This ptin is useful mainly fr granting a higher- r lwer-level Applicatin Rle t certain users. Fr example, yu can set a Viewer Applicatin Rle t a large grup f peple within yur rganizatin and then manually assign the higher level MediaSpace Admin rle t a few f them. T enable verriding settings manually On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Auth tab. Set the fllwing values and click Save. a. Under refreshdetailsonlgin, select N. This ptin is displayed nly when using an external authenticatin prvider. b. Under refreshrleonlgin, select N. This ptin is displayed nly when using an external rle authrizatin prvider. Scenari 2: Authenticatin and Authrizatin are Managed by Kaltura When des this scenari apply? Yu can use Kaltura as yur MediaSpace identity and rle authrizatin prvider when: Yu want t launch a MediaSpace pilt in yur rganizatin withut IT integratin. Yu want t quickly g live with yur rganizatinal vide prtal befre perfrming IT integratin with yur rganizatinal authenticatin and grup management systems. Only a few users in yur rganizatin need t wrk with MediaSpace, and there is n requirement r need fr managing user authenticatin and credential validatin in yur rganizatinal systems. Yu d nt have a centralized authenticatin system r yu are nt able t prvide access t yur authenticatin system frm the MediaSpace applicatin. Wh can access MediaSpace? Only users with a MediaSpace user accunt pre-prvisined in Kaltura can access MediaSpace. (The user accunt must include a MediaSpace Rle and a MediaSpace passwrd.) If yu want t revke MediaSpace access frm a specific user, it is yur respnsibility t delete the user accunt in ne f the fllwing ways: On the User Management panel f the Kaltura MediaSpace Administratin area, select ne r mre users, and click Delete r Delete Checked. Submit a Kaltura end-users CSV t delete MediaSpace user accunts in bulk. T learn mre, see the submit a Kaltura end-users CSV prcedure step. Use the Kaltura API t: Delete the user recrd. Remve the user's MediaSpace Rle stred in a custm data prfile. Kaltura MediaSpace Setup Guide 30

31 Authenticating and Authrizing Users in MediaSpace Hw d yu switch frm Kaltura-managed authenticatin and authrizatin t managing MediaSpace authenticatin and authrizatin in yur system? Fllwing the cmpletin f yur pilt, r when the IT integratin with yur user authenticatin and grup management systems is cmpleted, n the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Auth tab and change the selected authenticatin/authrizatin methd. In the Kaltura MediaSpace Administratin Area, yu may verride the Kaltura-managed Applicatin Rles frm yur system n the Cnfiguratin Management panel r by manually deleting existing MediaSpace user accunts n the User Management panel. T verride Kaltura-managed Applicatin Rles n the Cnfiguratin Management panel On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Auth tab. Set the fllwing values and click Save. a. Under refreshdetailsonlgin, select Yes. This ptin is displayed nly when using an external authenticatin prvider. b. Under refreshrleonlgin, select Yes. This ptin is displayed nly when using an external rle authrizatin prvider. Scenari 3: Authenticatin is Managed in an Organizatinal System, Authrizatin is Managed by Kaltura When des this scenari apply? Yu can use Kaltura as yur MediaSpace access and rle authrizatin prvider when: Yu have a small- t large-scale MediaSpace deplyment. Yu want all users t lg int MediaSpace with their rganizatinal credentials and t be authenticated by yur centralized authenticatin system. Authrizatin fr users t access MediaSpace and MediaSpace Applicatin Rles is independent f their membership in rganizatinal units r grups. Fr example, users wh will be granted MediaSpace access d nt belng t a specific rganizatinal unit r grup. Yu are nt able t prvide access t yur grup management system frm the MediaSpace applicatin fr setting grup-based rle authrizatin. Yu want t set users' applicatin rles befre their first lgin t MediaSpace. Wh can access MediaSpace? Only users wh are authenticated by yur systems and have MediaSpace user accunts pre-prvisined in Kaltura (the user accunt includes MediaSpace Applicatin Rles) can access MediaSpace. Users wh are nt authenticated by yur systems are denied access t MediaSpace, even if they are have a user accunt and a MediaSpace Applicatin Rle in Kaltura. These unauthenticated users will nt be able t lg in. Kaltura MediaSpace Setup Guide 31

32 Authenticating and Authrizing Users in MediaSpace Enabling Cmmn Lgin Cnfiguratins On the Cnfiguratin Management panel Auth tab f the Kaltura MediaSpace Administratin Area, the fllwing MediaSpace lgin ptins are available fr all authenticatin and authrizatin methds. Enabling Authenticatin Methds On the Cnfiguratin Management panel Auth tab f the Kaltura MediaSpace Administratin Area, the fllwing authenticatin methds are supprted as part f the MediaSpace standard installatin. When yu select an authenticatin adapter, a set f relevant cnfiguratin fields is displayed t fill in. LDAP Authenticatin User authenticatin and credentials validatin thrugh direct access t the rganizatinal LDAP r Active Directry server. SSO Gateway Authenticatin A Kaltura generic gateway fr integrating with a custmer- specific lgin and authenticatin implementatin, while prviding the user with a Single Sign-On experience. Header Authenticatin User is authenticated thrugh a request in the rganizatinal authenticatin system. The respnse includes the authenticated user ID in a specific HTTP header. Kaltura Authenticatin User authenticatin and credentials managed by Kaltura. Custm Authenticatin Methds Fr any ther type f authenticatin methd, custm adapters can be develped and added t the MediaSpace installatin. Enabling Authrizatin Methds On the Cnfiguratin Management panel Auth tab f the Kaltura MediaSpace Administratin Area, the fllwing authrizatin methds are supprted as part f the MediaSpace standard installatin. When yu select an authrizatin methd, a set f relevant cnfiguratin fields is displayed t fill in. Kaltura MediaSpace Setup Guide 32

33 Authenticating and Authrizing Users in MediaSpace LDAP Authrizatin The user s applicatin rle in MediaSpace is determined based n rganizatinal grups in which the user is a member, which are managed in the rganizatin s LDAP server. This authrizatin methd usually is used tgether with the LDAP authenticatin methd. The methd als can be selected when using ther authenticatin methds (SSO Gateway authenticatin, Kaltura authenticatin, and Header authenticatin). SSO Gateway Authrizatin - The user s applicatin rle in MediaSpace is set and passed t MediaSpace as part f the custmer-specific lgin and authenticatin implementatin, which is set thrugh the Kaltura SSO gateway interface. Always use this ptin with SSO Gateway authenticatin. This ptin cannt be used with any authenticatin methd besides SSO Gateway authenticatin. Kaltura Authrizatin Manage user authrizatin t access MediaSpace and user MediaSpace applicatin rles in Kaltura. This authrizatin ptin can be used with any ther authenticatin methd (SSO Gateway authenticatin, Kaltura authenticatin, and Header authenticatin). Custm Authrizatin Methds Fr any ther type f access and rle authrizatin methd, custm adapters can be develped and added t the MediaSpace installatin. Cnfiguring LDAP Authenticatin and Authrizatin T learn mre abut integrating yur LDAP server fr authenticating users and authrizing user access t MediaSpace with a specific applicatin rle, refer t Kaltura MediaSpace Intrductin t Authenticatin and Authrizatin Slutins and Kaltura MediaSpace LDAP Integratin Guide. T cnfigure user authenticatin thrugh yur LDAP server On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Auth tab. Under authnadapter, select LDAP AuthN Select yur preferences fr the cmmn lgin ptins. Under refreshdetailsonlgin, select yur preference. This ptin affects the updating f the user s first name, last name, and address (when prvided) frm yur LDAP system upn every lgin. 5. Under ldapserver: a. Select the LDAP Server access and bind settings. Yur bindmethd selectin will affect the infrmatin yu need t prvide fr authenticating the user. Kaltura MediaSpace Setup Guide 33

34 Authenticating and Authrizing Users in MediaSpace b. Select the LDAP attributes fr first name, last name and address. Ppulating the user s first and last name is used fr several MediaSpace ptins that require the user name. The address is ptinal. This field is useful fr user management and fr future features (such as ntificatins). Kaltura MediaSpace Setup Guide 34

35 Authenticating and Authrizing Users in MediaSpace If yu are using yur LDAP server t authrize user access t MediaSpace with a specific applicatin rle, cntinue with the next prcedure. If nt, select a different authrizatin methd. After yu cmplete and verify the steps, click Save. T cnfigure user authrizatin thrugh yur LDAP server On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Auth tab. Under authzadapter, select LDAP AuthZ. 3. Under refreshrleonlgin, select yur preference. This ptin affects the updating f the user s rle frm yur LDAP system upn every lgin. 4. Under ldapoptins, select yur preferences fr getting the list f grups in which the user is a member. This ptin is used t determine the user's MediaSpace Applicatin Rle. Under grupsmatchingorder, enter the rder fr matching MediaSpace rles t LDAP grups. The rder determines whether the strngest r weakest rle is mapped first. Yur grupsearch selectin will affect the infrmatin yu need t prvide. Kaltura MediaSpace Setup Guide 35

36 Authenticating and Authrizing Users in MediaSpace Kaltura MediaSpace Setup Guide 36

37 Authenticating and Authrizing Users in MediaSpace 5. Under ldapgrups, select yur preferences t define the mappings between the grups defined in yur LDAP server and the MediaSpace Applicatin Rles. 6. After yu cmplete and verify the steps, click Save. Cnfiguring SSO Gateway Authenticatin and Authrizatin T learn mre abut integrating MediaSpace with yur authenticatin systems using the MediaSpace SSO Gateway, refer t Kaltura MediaSpace Intrductin t Authenticatin and Authrizatin Slutins and Kaltura MediaSpace SSO Integratin Guide. T cnfigure user authenticatin using the MediaSpace SSO gateway On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Auth tab. Under authnadapter, select SSO Gateway AuthN Select yur preferences fr the cmmn lgin ptins. Under refreshdetailsonlgin, select yur preference. This ptin affects the updating f the user s first name, last name and address (when prvided) frm yur authenticatin system upn every lgin. Kaltura MediaSpace Setup Guide 37

38 Authenticating and Authrizing Users in MediaSpace 5. Under ss, select yur preferences fr integrating the MediaSpace SSO Gateway with yur lgin implementatin: secret Enter the secret string shared with the lgin page. The default value uses yur Kaltura Admin Secret (accessible frm KMC -> Settings -> Integratin Settings). lginurl Enter the abslute URL where yu hst the lgin page. lguturl Enter the URL t which MediaSpace redirects a user after invalidating the lcal MediaSpace sessin (fr example, when a user clicks lgut). - On yur site yu may use this page t invalidate ther authenticated sessins, if needed (fr example, CAS lgin). - A sessinkey URL parameter is autmatically appended t the lgut URL. This parameter securely encapsulates the user infrmatin, enabling yu t knw which user lgged ut. The sessinkey parameter is cnstructed using the secret shared with the lgin page After yu cmplete and verify the steps, click Save. If yu are using the MediaSpace SSO Gateway t authrize user access t MediaSpace with a specific applicatin rle, cntinue with the next prcedure. T cnfigure user authrizatin using the MediaSpace SSO gateway On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Auth tab. Under authzadapter, select SSO Gateway AuthZ. 3. Under refreshrleonlgin, select yur preference. This ptin affects the updating f the user s rle upn every lgin. 4. After yu cmplete and verify the steps, click Save. Kaltura MediaSpace Setup Guide 38

39 Cnfiguring Header Authenticatin T cnfigure header authenticatin thrugh the MediaSpace SSO gateway On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Auth tab. Under authnadapter, select Header AuthN Select yur preferences fr the cmmn lgin ptins. Under refreshdetailsonlgin, select yur preference. This ptin affects the updating f the user s first name, last name, and address (when prvided) frm yur authenticatin system upn every lgin. 5. Under headerauth, enter values fr: headername the ID f the authenticated user lguturl 6. After yu cmplete and verify the steps, click Save. Cnfiguring Kaltura Authenticatin and Authrizatin fr MediaSpace Authenticating r authrizing MediaSpace users in Kaltura requires creating MediaSpace user accunts that include a MediaSpace Applicatin Rle. Only users with a MediaSpace user accunt and MediaSpace Applicatin Rle are able t lg int MediaSpace. Authenticating MediaSpace users in Kaltura als requires setting a passwrd fr each MediaSpace user. Fllw the prcedure t create MediaSpace user accunts that include a MediaSpace Applicatin Rle. T cnfigure Kaltura authenticatin 1. On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Auth tab. Kaltura MediaSpace Setup Guide 39

40 Authenticating and Authrizing Users in MediaSpace 2. Under authnadapter, select Kms_Auth AuthN Select yur preferences fr the cmmn lgin ptins. After yu cmplete and verify the steps, click Save. T cnfigure Kaltura authrizatin On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Auth tab. Under authzadapter, select Kms_Auth AuthZ and click Save. T create MediaSpace user accunts that include a MediaSpace Applicatin Rle D ne f the fllwing: On the User Management panel f the Kaltura MediaSpace Administratin Area, yu can create and manage MediaSpace user accunts. Use the list t manually manage all users in the partner accunt that have a MediaSpace rle fr the specific MediaSpace instance. Submit a Kaltura end-users CSV t create MediaSpace user accunts in bulk. Use the fllwing frmat: Kaltura MediaSpace Setup Guide 40

41 Authenticating and Authrizing Users in MediaSpace T learn mre abut the end-user CSV schema, refer t End-Users CSV Usage and Schema Descriptin. The userid field must include a minimum f three characters. The MediaSpace passwrd must include a minimum f six characters. The MediaSpace Applicatin Rle is managed within the MediaSpace user metadata schema. Adjust the schema name in the example t include yur MediaSpace instanceid. (Yu can cpy the MediaSpace instanceid frm the Cnfiguratin Management panel Applicatin tab f the Kaltura MediaSpace Administratin Area.) Set the rle names in the CSV accrding t the rle labels yu set in the Cnfiguratin Management panel Rles tab f the Kaltura MediaSpace Administratin Area. When using Kaltura t authenticate users, yu may ppulate a sha1 hashed passwrd in the CSV as part f the partnerdata field, as in the example. MediaSpace administratrs are respnsible fr managing passwrd hashing and distributin t users. The un-hashed passwrd must include a minimum f six characters. When using Kaltura nly fr authrizing user access t MediaSpace with a specific applicatin rle, d nt ppulate the passwrd in the CSV. (Yu can remve the partnerdata clumn in the example frm the CSV since it is nt required.) Yu can submit the end-users CSV in the fllwing ways: - On the User Management panel f the Kaltura MediaSpace Administratin Area, click Submit CSV. - In the KMC, select the Uplad tab and then under Submit Bulk, select End-Users CSV. T autmate the update f the authrized MediaSpace users list When yu manage MediaSpace authrizatin in Kaltura, yu can develp autmated prcesses fr updating the list f MediaSpace users based n changes in yur rganizatinal infrmatin system. Yu can develp a scheduled update prcess t peridically add r delete multiple users t the MediaSpace users list using the Kaltura end-users CSV. In yur script, yu can call the user.addfrmbulkuplad Kaltura API actin t submit the CSV. Using Kaltura API actins, yu can develp a trigger-based prcess t update the MediaSpace users list in real time when changes ccur in yur rganizatinal infrmatin Kaltura MediaSpace Setup Guide 41

42 Authenticating and Authrizing Users in MediaSpace system. Yu can call the user.add, user.delete and user.update Kaltura API actins t add, delete, and update specific user recrds. Yu can call the metadata.add, metadata.delete, and metadata.update Kaltura API actins t add, delete, and update the user's MediaSpace rle. NOTE: Deleted users are als remved frm all channels in which they are members. Cntent wnership and analytics infrmatin f the deleted user are nt deleted. NOTE: Since user recrds are shared by all Kaltura applicatins running n the same accunt, we recmmend that yu delete recrds nly f users wh left the rganizatin. In ther cases, we recmmend revking the user's access t MediaSpace by using the Kaltura API t remve nly the user's MediaSpace rle r by using the User Management panel f the Kaltura MediaSpace Administratin Area t delete the user. Kaltura MediaSpace Setup Guide 42

43 SECTION 4 Organizatinal Strategy fr MediaSpace Entitlements When creating an rganizatinal vide prtal with MediaSpace, MediaSpace categries, channels and their respective user permissins can be set and maintained in different ways. When categries and channels serve rganizatinal units and grups, it may be pssible t create the channels and maintain the channel permissins based n data managed in the rganizatin s infrmatin system (fr example, identity management systems and grup management systems). This sectin addresses: Hw t plan the rganizatinal peratins and integratins related t managing user permissins Hw t create categries and channels in bulk fr grups managed in the rganizatinal infrmatin systems Hw t create and maintain user permissins based n grups managed in the rganizatinal infrmatin systems Hw t create and maintain the Add Members aut-cmplete list fr adding members manually These tasks can be accmplished in different ways since every rganizatin has different needs and requirements, deplys and supprts different infrmatin systems, and has different levels f IT capabilities and resurces. The guidelines in this dcument can be adapted t fit each rganizatin s needs and capabilities. Terminlgy User ID A user s unique identifier in yur rganizatin s infrmatin systems. The same ID is used in Kaltura as a unique identifier f the user in a specific partner accunt. Grup ID A unique identifier in yur rganizatinal infrmatin system representing an actual rganizatinal unit r an ad-hc security grup. A user can be a member f multiple grups and may hld a different rganizatinal rle in each grup. The rganizatinal rle f a user within a unit/grup may r may nt be represented within the rganizatin infrmatin system. MediaSpace Categry An pen/private/restricted categry in MediaSpace that a specific grup f users (categry members) is able t access. Categries are centrally created via the Kaltura Management Cnsle (KMC) and reflect the navigatin structure f yur MediaSpace site. The list f peple with permissin t access the categry may derive frm user membership in a specific rganizatinal grup r may be defined manually by the categry manager with n relatin t rganizatinal structure and units MediaSpace Channel An pen/private/restricted channel in MediaSpace that a specific grup f users (channel members) is able t access. The list f peple with permissins t access the grup channel may derive frm user membership in a specific rganizatinal grup r may be defined manually by the channel manager with n relatin t rganizatinal structure and units. NOTE: MediaSpace Channels can be assciated with ne r mre MediaSace Categry accrding t the entitlements set in the categry. Kaltura User A Kaltura backend bject that hlds infrmatin abut a specific user and is identified by the User ID. Kaltura supprts the management f different user attributes. The user ID is a mandatry attribute; the user s first name, last name, and screen name (by default, the user s full name) are required t enable cnvenient end-user management in MediaSpace and in the KMC. Kaltura MediaSpace Setup Guide 43

44 Organizatinal Strategy fr MediaSpace Entitlements Kaltura User bjects are autmatically created in Kaltura fr different scenaris. Fr user management purpses, Kaltura User bjects als may be created manually frm the KMC r using bulk services. The Kaltura User bject is used fr managing bth KMC admins and applicatin end-users. Only KMC administratrs have a special attribute granting access t the KMC accunt. Kaltura Categry A Kaltura backend bject fr managing media cllectins and the end-user entitlements t access and manage these media cllectins in MediaSpace. This backend entity manages MediaSpace Channels and MediaSpace Categries. Kaltura Categry ID A Kaltura internal unique identifier f a single Kaltura Categry Object. Kaltura Categry Reference ID A Kaltura Categry attribute designed t hld and cnnect the categry t an external identifier such as the Grup ID. Uniqueness f the Categry Reference ID is nt enfrced by Kaltura. Kaltura s End-User Entitlements A permissin level that enables a specific end-user t access, cntribute t, r manage a specific channel r categry. In the Kaltura backend, end-user entitlements are managed in Kaltura s categryuser bject, which manages the relatinship between a specific end-user and a specific categry. Planning Cnsideratins Cnsider the fllwing questins when yu plan the rganizatinal prcess fr managing MediaSpace channels and channel memberships. What types f channels will be in yur vide prtal? Educatin Examples Curse channels Fr media-rich curses, faculty can create a curse channel in MediaSpace in a simple, feature-rich envirnment. Schl/Department channels Each schl/department has its wn managed channel that shws cntent that either is accessible nly t the schl/department r is pen t all. Wrkgrup channels Nt bund by a strict learning management system (LMS) structure, faculty and students can create crss-curse ad hc grups fr research, prjects, and mre. Prtfli Channel Allw faculty and any authrized users t create their wn prtfli channel, with recrdings f public speaking, awards and events, lectures, vide wrk, and mre. Typically, the channels are public under the university rf, but als can be restricted t a specific set f users within the rganizatin. Enterprise Examples Department channel Each department head manages the department channel that shws cntent that either is accessible nly t the department r is accessible t all emplyees. Cmmunity channels All emplyees are empwered t create their wn channels, and can either invite specific c-wrkers t jin r can enable pen access. Fr each channel, the creatr can cntrl wh can cntribute and whether mderatin is required. Fr which units in yur rganizatin d yu want t create a MediaSpace channel? Examples: Fr all grups f a specific type (fr example, all departments r all schls) Fr nly a few grups within the rganizatin (fr example, a few departments r Kaltura MediaSpace Setup Guide 44

45 Organizatinal Strategy fr MediaSpace Entitlements media-related curses nly) Fr a few cmmunities/wrk grups within the rganizatin Every user will be able t pen a channel. What shuld be the typical/default privacy level required fr channels f each type? Open - All users in the rganizatin are entitled t access the channel and cntribute cntent. Restricted - All users in the rganizatin are entitled t access the channel, but nly specific users are entitled t cntribute cntent. Private - Only specific users in the rganizatin are entitled t access the channel and cntribute cntent. What shuld be the typical/default privacy level required fr categries f each type? Open - All users in the rganizatin are entitled t access the categry including annymus users if yur site is cnfigured fr unauthenticated access. Only specific users are entitled t cntribute cntent. Restricted - All users in the rganizatin are entitled t access the categry, but nly specific users are entitled t cntribute cntent. Private - Only specific users in the rganizatin are entitled t access the categry and cntribute cntent. What changes in yur rganizatin shuld require an update t user permissins? Examples: Smene jined/left an rganizatinal grup. Smene's rle in rganizatinal grups changed. Smene jined r left the rganizatin. What is the frequency and vlume f the relevant rganizatinal changes? Hw ften d the changes happen? Hw many users/grups are affected? What is the acceptable lag time fr channel permissins t be updated in MediaSpace fllwing an rganizatinal change? Hw prmptly must rganizatinal changes be reflected within MediaSpace channels and channel permissins? Fr example, immediately, within a few hurs, n the next day. Hw available is yur rganizatinal IT Department? D yu have resurces fr develping and maintaining an autmated update f channel permissins based n changes in yur rganizatinal infrmatin systems? Kaltura MediaSpace Setup Guide 45

46 Channel Management Types Based n yur evaluatin f the planning cnsideratin questins, decide n the best way t manage channels and channel memberships in yur rganizatin. Yu can select ne f the fllwing ptins r cmbine ptins t manage different types f channels. Management Type Integratin Effrt Channel Management Creatin Channel Permissins Initial Setup Channel Permissins Onging Updates Self-Created Very Lw Wh? Organizatinal unit/grup managers r anyne authrized by the rganizatin t create a MediaSpace channel Channel Managers Channel Managers When? Whenever a new channel is needed Upn channel creatin When needed Hw? On the MediaSpace site On the MediaSpace site On the MediaSpace site Centrally Assigned Lw Medium Wh? Vide prtal administratrs, with r withut IT department assistance Channel Managers Channel Managers When? Upn initial set up f vide prtal channels, upn majr rganizatinal changes, when a new channel is needed Upn channel creatin When needed Hw? In the KMC: manual r bulk CSV-based creatin On the MediaSpace site On the MediaSpace site Centrally Prepared Medium Wh? Vide prtal administratrs, with r withut IT department assistance Vide prtal administratrs, with r withut IT department assistance Organizatinal unit managers and/r their assistants. When? Upn initial set up f vide prtal channels, upn majr rganizatinal changes, when a new channel is needed Upn channel creatin When needed Hw? In the KMC: manual r bulk CSV-based creatin In the KMC: manual r bulk CSV-based setup On the MediaSpace Site Autmatically Maintained High Wh? Vide prtal administratrs, with r withut IT department assistance Vide prtal administratrs, with r withut IT department assistance Scheduled autmated update prcess r based n infrmatin system s triggers When? Upn initial set up f vide prtal channels, upn majr rganizatinal changes, when a new channel is needed Upn initial set up f vide prtal channels, upn majr rganizatinal changes, when a new channel is needed Scheduled as needed r triggered in realtime upn grup membership mdificatins Hw? In the KMC: manual r bulk CSV-based creatin In the KMC: manual r bulk CSV-based setup See Autmatically Updating Channel Permissins Creating MediaSpace Channels The fllwing tpics are described: Creating Channels in MediaSpace by Users Kaltura MediaSpace Setup Guide 46

47 Creating MediaSpace Channels Creating Channels Centrally by Administratrs Creating Channels in MediaSpace by Users Organizatinal grup managers r anyne authrized by the rganizatin t create channels in MediaSpace can create a channel n the MediaSpace site and manually select the channel s settings and member permissins. Users wh create channels in MediaSpace require a MediaSpace applicatin rle that enables channel creatin. T learn mre, refer t Setting Permissins fr Creating a MediaSpace Channel in this guide. T learn mre abut channel creatin and management, refer t Creating and Managing a Channel in the Kaltura MediaSpace User Manual. Creating Channels Centrally by Administratrs Vide prtal administratrs can create channels, with r withut the assistance f the rganizatinal IT department. Creating MediaSpace Channels in Bulk Yu may need t create channels in bulk, either at the initial setup r upn majr rganizatinal changes that trigger the creatin f numerus channels. We recmmend creating channels in bulk using Kaltura s bulk services with Kaltura s Categries CSV. T create MediaSpace Channels in bulk Prepare the initial list f grups that will use the new MediaSpace Channels. Yu can prepare the list manually r exprt the list frm the rganizatinal infrmatin system. Include at least the fllwing infrmatin frm yur rganizatinal infrmatin system: Fr grups managed in yur rganizatinal infrmatin system, include the Grup ID f each rganizatinal grup/unit. If a grup manager plans t create the channel members list and permissins in MediaSpace, specify the User ID f the grup manager. This sets the grup manager as the channel wner and enables the grup manager immediate access t the grup channel settings in MediaSpace. If a friendly grup name is available in yur infrmatin system, yu can exprt the friendly grup name t use as the channel name. Edit the basic grup list in a spreadsheet editr r prgrammatically t cmply with Kaltura s Categries CSV frmat. Insert the fllwing infrmatin t create channels in MediaSpace with relevant channel settings (see example belw). Enter the relative categry path t yur MediaSpace Channels categry. When relevant, set each Grup ID as the reference ID f its respective categry. This enables yu t refer t the categry based n the Grup ID, when needed (fr example, fr autmated channel membership creatin). Enter the channel name. Yu can use the grup name exprted frm yur infrmatin system, the Grup ID, r any name yu select. The name will be displayed as the channel name in MediaSpace. Fr the categry wner, enter the User ID f the user wh will initially manage the channel (fr example, the User ID f the unit/grup manager). Enter the categry entitlement settings accrding t the type f channel (pen/restricted/private). Kaltura MediaSpace Setup Guide 47

48 Creating and Updating Channel and Categry Permissins Yu can add additinal infrmatin, such as channel descriptin, tags, and any custm channel classificatin r tpic managed by the categry s custm data. The channel wner als can manually enter this infrmatin in MediaSpace after the channel is created. Insert the Categries CSV headers fr fields that are ppulated in yur CSV. Categries CSV fr creating different types f MediaSpace Channels 3. NOTE: While there is n limit n the number f lines in the CSV, the prcessing time f each CSV is affected by the number f lines in the CSV. Therefre, we recmmend splitting the CSV int manageable chunks fr cnvenient editing, prcessing, and tracking. On the KMC Uplad tab, uplad the Categries CSV. Bulk prcessing in Kaltura is handled in an asynchrnus batch prcess. Track the cmpletin status f the bulk jb in the KMC n the Bulk Uplad Lg page r using ntificatins set by Kaltura fr yur accunt. Creating MediaSpace Channels Individually Occasinally yu may need t create a single channel r a few channels. We recmmend creating and cnfiguring individual channels in the KMC Edit Categry windw. T learn mre, refer t Managing Categries in the Kaltura Management Cnsle (KMC) User Manual and Understanding Privacy Types in this guide. Creating and Updating Channel and Categry Permissins This sectin describes the fllwing tpics: Assigning Permissins and Entitlements Setting Up Members and Permissins Manually in MediaSpace Setting Up Permissins Centrally in Bulk Setting Up Permissins Individually Autmatically Updating Permissins Deleting MediaSpace Channels Deactivating Channel Memberships Assigning Permissins and Entitlements Entitlements are cnfigurable fr categries as well as channels. Yu can define whether the categry is pen, private r restricted. Yu can als define wh actually has access t specific categries and in which rle. Frmerly, if yu wanted smene t publish media t a gallery they had t be defined as an adminrle. Yu can define a categry and allw specific users t cntribute cntent prviding granular cntrl ver the entitlements and the rles f users accrding t the structure f yur categries. Kaltura MediaSpace Setup Guide 48

49 Creating and Updating Channel and Categry Permissins This includes: Inheriting permissins frm parent categries yu dn t need t define users again and again in each sub categry Imprting members frm the parent categry - yu can add r remve users frm subcategries Yu can define a grup name, fr example LDAP grup r authrizatin prvider that yu are using and the default permissin level, s that when yu are develping an ffline sync prcess, t synchrnize rles and permissins n KMS and rles and permissins in yur identity prvider, yu can leverage the grup name definitin t add r remve users frm KMS. The fllwing table presents the different permissins and actins fr entitlement settings in MediaSpace. Privacy Type Actin Categry Channel Open View Annymus + Any authenticated user Cntribute Cntributr+ adminrle+ Restricted View Any authenticated user Any authenticated user Any authenticated user Cntribute Cntributr+ Cntributr+ Private View Member+ Member+ Cntribute Cntributr+ Cntributr+ Setting Up Members and Permissins Manually in MediaSpace Channel and categry managers can manually add members t their channels, assign and update member permissin levels, and remve members. A channel manager manages channel members and permissins n the Edit Channel / Categry page in MediaSpace. T learn mre, refer t Creating and Managing a Channel in the Kaltura MediaSpace User Manual. Setting Up Permissins Centrally in Bulk The vide prtal administratr in the KMC can initially assign categry and channel permissins fr categries r channels related t rganizatinal units. The rganizatinal IT department usually needs Kaltura MediaSpace Setup Guide 49

50 Creating and Updating Channel and Categry Permissins t assist setting up grup permissins by exprting the rganizatinal grup membership data frm the rganizatin s infrmatin systems. Channel and categry permissins shuld be assigned in bulk fr a large number f new categries r channels, either at the initial setup r upn majr rganizatinal changes that trigger the creatin f numerus categries / channels. We recmmend assigning permissins in bulk using Kaltura s bulk services with Kaltura s End-User Entitlements CSV. NOTE: Yu must assign permissins in bulk after creating the channels r categries. Assigning permissins in bulk requires first setting the Grup ID value as the channel Categry s Reference ID. See the prcedure T create MediaSpace Channels in bulk. T create memberships and permissins in bulk 1. Fr all channels r categries fr which yu are assigning permissins, prepare an initial list f rganizatinal user/grup membership pairs with the required channel permissin levels. 2. Initial list f grup memberships When yu exprt grup memberships frm yur rganizatinal infrmatin system fr the list, yu may need t separately query all grup managers, all grup members, and s n. This is t ensure that different channel permissin levels are assigned accrding t the user s rganizatin rle within a specific grup. If yu want the channel t be self-managed in MediaSpace and did nt assign a channel wner when creating the channel, assign a Manager permissin level t at least ne user. Edit the basic grup membership list in a spreadsheet editr r prgrammatically t cmply with Kaltura s End-User Entitlements CSV frmat. Specifically, insert the CSV field headers, specify the CSV add actin (actin =1), and specify the numeric value f each permissin level accrding t Kaltura s specificatins. Yu may assign permissins fr multiple channels and categries within ne CSV file. Kaltura MediaSpace Setup Guide 50

51 Creating and Updating Channel and Categry Permissins Memberships frmatted in Kaltura's End-User Entitlements CSV NOTE: While there is n limit n the number f lines in the CSV, the prcessing time f each CSV is affected by the number f lines in the CSV. Therefre, we recmmend splitting the CSV int manageable chunks fr cnvenient editing, prcessing, and tracking. 3. On the KMC Uplad tab, uplad the End-User Entitlements CSV. Bulk prcessing in Kaltura is handled in an asynchrnus batch prcess. Track the cmpletin status f the bulk jb in the KMC n the Bulk Uplad Lg page r using ntificatins set by Kaltura fr yur accunt. Setting Up Permissins Individually Occasinally the vide prtal administratr may need t assign individual membership and permissins. We recmmend assigning individual channel membership and permissins in the KMC Edit Categry windw. T learn mre, refer t Managing Categries in the Kaltura Management Cnsle (KMC) User Manual. Autmatically Updating Permissins Fllwing the initial setup f permissins, yu can autmate the updating f permissins t reflect relevant changes in yur rganizatin (user jined/left an rganizatinal grup; User jined/left the rganizatin, and s n). Autmated updating f MediaSpace permissins based n changes made in yur rganizatinal infrmatin system is very useful fr big rganizatins. Autmatic permissin updates help when rganizatinal grup memberships are updated frequently and when yu want t eliminate the need fr each channel manager t manually manage permissins in MediaSpace. Autmating nging updates f channel permissins requires the expertise and full invlvement f the rganizatinal IT department and requires yur rganizatinal infrmatin system t supprt ne f the fllwing mdes: Autmated peridic exprt f changes Audit, query, reprt, r exprt changes in yur infrmatin systems fr a specific time perid (fr example, day r week) t prepare and submit a scheduled bulk update using Kaltura s End-User Entitlements CSV r Kaltura's API. Real-time triggers Trigger real-time update calls frm yur infrmatin system r frm related applicatins t Kaltura using Kaltura s API when every relevant change ccurs in yur system. NOTE: The fllwing prcedures prvide general guidelines and rely n yur IT experts and/r develpers t tailr the autmatin prcess based n the capabilities f yur rganizatinal infrmatin system and related applicatins. Kaltura s prfessinal services team may prvide assistance in designing and develping the autmated updating prcess and will prvide all infrmatin required fr utilizing Kaltura s bulk services and API fr autmatin. T develp an autmated prcess fr peridically updating channel membership permissins Define hw frequently t schedule the update. Decide hw ften yu need t update the membership permissins, and schedule the frequency f the update prcess accrdingly. Develp an autmated prcess that includes the fllwing steps and lgic: a. List the required permissins mdificatins. Kaltura MediaSpace Setup Guide 51

52 Creating and Updating Channel and Categry Permissins Based n yur infrmatin system audit, querying, and exprt capabilities, retrieve the list f users wh within a specific time range jined r left grups within yur rganizatin, r changed their rganizatinal rle in specific grups. Yu may rely n direct audit infrmatin available in yur infrmatin system r develp a query and sync prcess that implements the fllwing lgic: List every user whse recrd was created/mdified/deleted within a specific time range (fr example, frm the last update until nw). Fr each user in this list: a. Query yur infrmatin system t get the list f grups that the user currently belngs t (pssibly with the specific rle in each grup) b. Query Kaltura fr the list f channels and categries that the user currently is a member f. Cmpare the tw lists (based n the Grup ID and Categry reference ID) and implement the lgic fr determining the channels fr which the specific user s permissin shuld be created, updated, r deleted. Frmat this as an initial list f channel permissin actins (add, update, delete). This lgic assumes that changes in user grup memberships affect the mdificatin date f the user s recrd. When changes in user grup memberships affect the mdificatin date f the grup s recrd, implement an equivalent lgic that is riented tward synchrnizing the list f channel members instead f synchrnizing the list f channels that the user is a member f. NOTE: An attempt t create/update/delete user permissin in a channel s categry that des nt exist yet in Kaltura will fail. Yu may extend the lgic fr autmatic creatin f new channels when the first relevant grup membership is set in Kaltura. Nte that such an additin may cause uncntrlled channel creatin and may result in a large number f empty channels, which is nt recmmended when channel brwsing is enabled in yur site. An attempt t create a user permissin in a channel s categry when the user recrd is nt yet in Kaltura will cause the autmatic creatin f the user s recrd in Kaltura with the specified User ID. The categry s reference ID is a standard way t map a single rganizatinal grup t a single channel. T autmatically assign permissins fr a single channel t users f multiple rganizatinal grups, yu may tailr a synchrnizatin lgic that relies n a categry custm data schema that enables multiple Grup IDs t be assigned specific permissin levels t a single categry. Cntact Kaltura prfessinal services fr assistance if necessary. b. Prepare the End-User Entitlements CSV. Transfrm the initial list f channel permissin actins (add, update, delete) t cmply with Kaltura s End-User Entitlements CSV frmat. Insert the CSV field headers and specify the permissin levels and actins. T add a user permissin, use the CSV add actin (actin = 1). T update a user permissin r create a new ne as a fallback in case the permissin yu attempt t update was nt yet set, use the CSV add r update actin (actin = 6). T delete a user permissin, use the CSV delete actin (actin = 3). Channel permissin actins frmatted in Kaltura's End-User Entitlements CSV c. Submit the End-User Entitlements CSV. When the End-User Entitlements CSV is available, submit it t Kaltura using the Kaltura Kaltura MediaSpace Setup Guide 52

53 Creating and Updating Channel and Categry Permissins API: Call the categryuser.addfrmbulkuplad API actin. Bulk prcessing in Kaltura is handled in an asynchrnus batch prcess. Track the cmpletin status f the bulk jb in the KMC n the Bulk Uplad Lg page r using ntificatins set by Kaltura fr yur accunt. T develp a trigger-based prcess fr updating membership permissins NOTE: Fr changes in yur infrmatin system t trigger real-time updates t channel membership permissins, yur infrmatin system r related applicatins must supprt real-time triggering f ntificatins t ther systems. Develp the fllwing: Trigger an Add Permissin call Create a script that implements the fllwing Kaltura API requests when a new grup membership is created fr a user in yur infrmatin system (a user jins an rganizatinal grup). a. Call the categry.list API actin t retrieve the categry bject. In the list filter, include the Grup ID set as the Categry s Reference ID attribute. b. When the categry is fund, call the categryuser.add API actin t create a new permissin fr the user with the prper permissin level. Trigger a Delete Membership call Create a script that implements the fllwing Kaltura API requests when an existing grup membership is remved frm a user in yur infrmatin system (a user leaves an rganizatinal grup). a. Call the categry.list API actin t retrieve the categry bject. In the list filter, include the Grup ID set as the Categry s Reference ID attribute. b. When the categry is fund, call the categryuser.delete API actin t delete the user's existing membership. Trigger an Update Channel Membership call Create a script that implements the fllwing Kaltura API requests when an existing grup membership type in yur infrmatin system is changed in a way that impacts the relevant channel r categry permissin level (fr example, a user's rle within a grup changes and the user shuld be set as a channel manager). a. Call the categry.list API actin t retrieve the categry bject. In the list filter, include the Grup ID set as the Categry s Reference ID attribute. b. When the categry is fund, call the categryuser.update API actin t adjust the user s permissin level. NOTE: In the previus steps yu may skip step A, which lists the categry with the specified Reference ID, if yu stre the Kaltura Categry ID in yur infrmatin system s grup recrd. Enabling Manual Overrides f Autmatically Updated Permissins When permissins are assigned and autmatically updated based n rganizatinal grup memberships, yu may want t allw managers and vide prtal administratrs the flexibility t assign different permissins in specific cases. Examples: In a cmpany departmental channel, yu want ne f the emplyees t be the channel mderatr, while all emplyees in the department are assigned nly the channel member permissin level. In a curse channel, yu want t assign cntributin privileges t ne f the students, while all ther students are assigned nly the channel member permissin. In a cmpany business unit channel, yu want the unit s administrative assistant t be the Kaltura MediaSpace Setup Guide 53

54 Creating and Updating Channel and Categry Permissins channel manager but there is n attribute within yur rganizatinal infrmatin system that yu can use t assign this permissin level autmatically. The Update Methd attribute f channel permissins enables manual verrides t a channel s user permissin levels that will nt be updated by the autmatic update prcess. Yu can set the Update Methd as autmatic r manual. Call the categryuser.update Kaltura API actin t enable a cntrlled verride f permissin levels that were set r updated manually in MediaSpace r the KMC. Use the verride parameter t indicate whether t verride a permissin level that is set manually. Using this API actin enables yu t implement a lgic that prevents manually created r updated permissin levels frm being updated by autmated prcesses r that allws the permissin levels t be updated nly in specific cases. By default, end-user permissins created in bulk using a CSV use the autmatic update methd and will nt verride manual updates t permissin levels. Any member added in MediaSpace is set t the manual update methd. In additin, any permissin level change t existing members by a MediaSpace channel r categry manager sets the channel permissin t manual update. Yu can view and fully cntrl the permissin level update methd in the KMC Categry Edit windw. Deleting MediaSpace Channels MediaSpace Channels can be deleted: By the channel wner in MediaSpace By the vide prtal administratrs in the KMC With a bulk service, using Kaltura s Categries CSV With a script that calls the categry.delete Kaltura API actin When a categry is deleted, the media entries in the categry (including sub-categry entries) are nt deleted. The media entries lse the assciatin with the deleted categry, including any privacy setting defined in the deleted categry. T plan channel deletins and t ensure that access t cntent in deleted channels is cntrlled accrding t yur rganizatinal needs, nte that: 1. When a channel is deleted in MediaSpace, a media entry in the channel that is nt assciated with any ther channel r gallery becmes private (assciated with the MediaSpace private categry). 2. When categries are deleted manually in the KMC r using the Categries CSV, the media entries in the categry autmatically are assciated with the deleted categry's parent categry. Befre deleting a categry, yu may want t assciate the categry's entries with new categries using the entry bulk actins available in the KMC (Edit Categries, Add t New Categry). When a categry is deleted using the categry.delete Kaltura API actin, yu can cntrl whether the deleted categry's media entries autmatically are assigned t the parent categry. In additin, yu can prgrammatically assciate the entries with ther categries befre the categry is deleted, accrding t the lgic yu want t implement. Deactivating Channel Memberships Deactivating MediaSpace channel memberships may be useful when yu want t blck channel members frm accessing a channel s cntent while retaining the ptin t reactivate their memberships later. Kaltura MediaSpace Setup Guide 54

55 Creating and Updating the Add Members Aut-Cmplete List T deactivate and reactivate channel memberships Yu can d either f the fllwing: In the KMC Edit Categry windw, apply the deactivate/activate actin t selected channel members. Prepare a Kaltura End-User Entitlements CSV: T deactivate a user's channel membership, use the CSV update actin (actin = 2) with status = 3. T activate a user's channel membership, use the CSV update actin (actin = 2) with status = 1. Deactivating channel's members (status = 3) Reactivating channel's members (status=1) Creating and Updating the Add Members Aut-Cmplete List A channel r categry manager can add end-users as members in MediaSpace n the Members tab f the Edit Channel / Categry page. The manager can cnveniently select members using an autcmplete feature. In the Add Member windw under Enter user name, the manager starts typing a user name r user ID. Suggested user names are displayed after three characters are entered, and the manager can select a member t add. T learn mre abut editing members, refer t Editing Channel Users in the Kaltura MediaSpace User Manual. By default, the aut-cmplete list includes nly users wh already are listed in Kaltura. When authrizing access t MediaSpace thrugh integratin with SSO/LDAP, a user's recrd in Kaltura is nt necessarily created prir t the user s first lgin t MediaSpace. T ppulate the aut-cmplete list with all users wh ptentially can use MediaSpace (and nt nly thse wh already are lgged-in), yu may pre-prvisin the user recrds in Kaltura. The Wrkflw fr Creating and Updating the Add Members Aut-Cmplete List: 1. Setting Up the Initial Add Members Aut-Cmplete List 2. Updating the Add Members Aut-Cmplete List Kaltura MediaSpace Setup Guide 55

56 Creating and Updating the Add Members Aut-Cmplete List NOTE: When yu use Kaltura t authrize access t MediaSpace, it is assumed that all user accunts are pre-prvisined in Kaltura. Therefre, the aut-cmplete list includes all ptential MediaSpace users. Setting Up the Initial Add Members Aut-Cmplete List T ppulate the Add Members aut-cmplete user list in bulk Prepare the initial list f users in yur rganizatin wh will be eligible t access MediaSpace. Yu can prepare the list manually r exprt the list frm yur rganizatinal infrmatin system. Include at least the fllwing infrmatin: User ID User s first name User's last name Edit the initial users list in a spreadsheet editr r prgrammatically t cmply with Kaltura s end-users CSV frmat. a. Use the CSV add r update actin (actin = 6) t update any existing user recrd that includes nly the user ID with the user s first and last names, r t create new recrds. b. (Optinal) Cmbine the first and last names int an additinal field called screenname, which als is used in the KMC and applicatins. Adding/Updating User Recrds Using the End-Users CSV 3. NOTE: While there is n limit n the number f lines in the CSV, the prcessing time f each CSV is affected by the number f lines in the CSV. Therefre, we recmmend splitting the CSV int manageable chunks fr cnvenient editing, prcessing, and tracking. On the KMC Uplad tab uplad the End-Users CSV. Bulk prcessing in Kaltura is handled in an asynchrnus batch prcess. Track the cmpletin status f the bulk jb in the KMC n the Bulk Uplad Lg page r using ntificatins set by Kaltura fr yur accunt. Updating the Add Members Aut-Cmplete List Yu may need t update the Add Members aut-cmplete list when users jin r leave yur rganizatin. T add r delete users, yu can: Manually update the users list and submit the End-Users CSV. Develp an autmated prcess fr peridically updating the Add Members aut-cmplete users list. Develp a trigger-based prcess fr updating the Add Members aut-cmplete user list. Kaltura MediaSpace Setup Guide 56

57 Creating and Updating the Add Members Aut-Cmplete List NOTE: Deleted users are als remved frm all channels in which they are members. Cntent wnership and analytics infrmatin f the deleted user are nt deleted. NOTE: Since user recrds are shared by all Kaltura applicatins running n the same accunt, we recmmend that yu delete recrds nly f users wh left the rganizatin. NOTE: Integrating the Add Members aut-cmplete feature directly with yur infrmatin system t enable a real-time search f users may be pssible as custm wrk. The integratin requires real-time access and search capabilities based n user ID and user name. T learn mre, cntact Kaltura. T develp an autmated prcess fr peridically updating the Add Members aut-cmplete users list Define hw frequently t schedule the update. Decide hw ften yu need t update the Add Members aut-cmplete users list, and schedule the frequency f the update prcess accrdingly. Develp an autmated prcess that includes: a. List the users t add r delete in the Add Members aut-cmplete users list. Create the list f users t be added r deleted, based n yur infrmatin system audit, querying, and exprt capabilities. b. Prepare the End-User CSV. Transfrm yur update data t cmply with the Kaltura s end-users CSV frmat fr adding/deleting users frm the user list. Insert the CSV field headers and specify the actins. T add a user, use the CSV add r update actin (actin = 6). T delete a user, use the CSV delete actin (actin = 3). User recrds are added/updated/deleted using Kaltura's End-Users CSV c. Submit the End-User CSV. When the End-Users CSV is available, submit it t Kaltura using the Kaltura API: Call the user.addfrmbulkuplad API actin. Bulk prcessing in Kaltura is handled in an asynchrnus batch prcess. Track the cmpletin status f the bulk jb in the KMC n the Bulk Uplad Lg page r using ntificatins set by Kaltura fr yur accunt. NOTE: Fr the updating prcess, yu can use direct Kaltura API calls (user.add, user.delete) instead f the CSV. T develp a trigger-based prcess fr updating the Add Members autcmplete users list NOTE: Fr changes in yur infrmatin system t trigger real-time updates t the Add Members aut-cmplete users list, yur infrmatin system r related applicatins must supprt real-time triggering f ntificatins t ther systems. Kaltura MediaSpace Setup Guide 57

58 Creating and Updating the Add Members Aut-Cmplete List 1. Develp the fllwing: Trigger an Add User ntificatin. Create a script that implements the fllwing Kaltura API requests when a new user wh is eligible t access MediaSpace is added t yur infrmatin system. Call the user.add API actin t create a new user recrd. Specify at least the fllwing: - User ID - User s first name - User s last name - screenname (Cmbine the first and last names.) 2. Trigger a Delete User ntificatin. Create a script that implements the fllwing Kaltura API requests when a MediaSpace user leaves yur rganizatin. Call the user.delete API actin t delete the user s recrd frm Kaltura. Specify the User ID. 3. Trigger an Update User ntificatin. Create a script that implements the fllwing Kaltura API request when an existing MediaSpace user's name changes in yur infrmatin system. Call the user.update API actin t update the user recrd. Specify the fllwing: - User ID - Updated values fr: User s first name User s last name screenname (Cmbine the first and last names Kaltura MediaSpace Setup Guide 58

59 SECTION 5 Setting the Hme Page MediaSpace prvides a hme page mdule that allws yu t curate and define specific cntent that yu wuld like t feature in the landing page f yur MediaSpace site. The hme can cntain a single large carusel and as many additinal lists f featured cntent. This sectin describes hw t cnfigure yur hme page and set yur MediaSpace site t display yur hme page as yur landing page. Cnfiguring yur Hme Page T cnfigure yur hme page cntent On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Hme tab. Under enabled, select Yes. If yu wuld like t use a carusel cntrl: Select Yes fr caruselenabled. In the carusel sectin, Select the type f playlist t lad in the carusel. The ptins are: Mst Recent All published media by creatin date Mst Viewed All published media by number f views Mst Liked All published media by number f likes Mst Cmmented All published media by number f cmments Custm Playlist This ptin will allw yu t enter any manual r rule based playlist created via the KMC. When selecting this ptin, yu can enter the playlist ID in the Kaltura MediaSpace Setup Guide 59

60 Setting the Hme Page additinal playlistid field. Refer t the Kaltura Management Cnsle (KMC) User Manual t learn hw t create custm playlists. caruselbg Defines the hex clr cde fr letterbxing fr cases that the thumbnail that is displayed desn t fill the entire carusel T add additinal lists in the hme page, in the lists sectin, click Add lists. Repeat these actins fr each list t feature in the hme page. Fr each list yu can define the fllwing: a. Select the type f playlist t lad in the carusel. The ptins are: Mst Recent All published media by creatin date Mst Viewed All published media by number f views Mst Liked All published media by number f likes Mst Cmmented All published media by number f cmments Custm Playlist This ptin will allw yu t enter any manual r rule based playlist playlist created via the KMC. When selecting this ptin, yu can enter the playlist ID in the additinal playlistid field. Yu can refer t the Kaltura Management Cnsle (KMC) User Manual t learn hw t create custm playlists b. name The title that is displayed fr the list in the hme page. Click Save. T cnfigure yur hme page as yur landing page Make sure the hme page is cnfigured and enabled as in the instructins. G t the Navigatin tab. Click Add pre Add a: a. type: Link b. name: Hme (r any ther textual descriptin that will appear in the navigatin panel fr yur hme page. c. value: /hme 5. Click Save. NOTE: The hme page must be the first item (tp ne) in yur pre navigatin items t functin as the landing page f the site. Kaltura MediaSpace Setup Guide 60

61 SECTION 6 Custmizing the Lk and Feel MediaSpace allws yu t verride the default style that is included in the applicatin. The default style is defined in btstrap.css. Since the default theme in MediaSpace is built n tp f the Twitter Btstrap framewrk, yu can prvide a standard Btstrap CSS and verride the default style that MediaSpace prvides ut-f-the-bx. This sectin defines the different ptins t skin MediaSpace and adjust it t yur wn brand clrs. Chsing a Different Included Style MediaSpace includes 13 additinal styles t chse frm in additin t the default style. These styles are pen surce CSS files available frm Btswatch. With a single selectin, frm yur Kaltura MediaSpace Administratin Area, yu can quickly change the style f yur MediaSpace. Fr example: T chse a different Btswatch CSS On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Btswatch tab. Under enabled, select Yes. Under btstrap, select the Btswatch CSS style yu wuld like t apply t yur site. Click Save. Refresh yur MediaSpace site t see the updated style Uplading yur Own Custm Style Yu can create yur wn custm Btstrap CSS and uplad it via the MediaSpace Administratin Area. Yu can write a CSS using yur favrite CSS editing tl, r use wn f the many dedicated Btstrap tls that generate a standard Btstrap CSS withut the need t d any cding. Refer t the Kaltura MediaSpace Styling Guide fr infrmatin n hw yu can create yur wn custm CSS file befre yu uplad it t MediaSpace. Kaltura MediaSpace Setup Guide 61

62 Custmizing the Lk and Feel T uplad a custm CSS file On the Cnfiguratin Management panel f the Kaltura MediaSpace Administratin Area, pen the Cssuplad tab. Under enabled, select Yes. Click Save. Yu will nt be able t uplad a file until the mdule is enabled. Under the btstrap sectin, click the uplad link Brwse t yur Btstrap CSS file and click Uplad. The additinal sectin, allws yu t prvide a separate CSS file fr ther CSS classes used in MediaSpace that are nt part f the standard Btstrap CSS file. If yu want t verride any f these classes, create a separate CSS file and uplad it thrugh the uplad link in this sectin Click Save. Refresh yur MediaSpace site t see the updated style. Kaltura MediaSpace Setup Guide 62

63 SECTION 7 MediaSpace Administratin: Actins and Cnfigurable s This reference sectin fr the Kaltura MediaSpace Administratin Area lists: The available actins in the User Management panel The cnfigurable fields in the Cnfiguratin Management panel, which includes Glbal and Mdules sectins User Management Actin Add New User Delete Checked Submit CSV Edit User Delete Descriptin Add a new MediaSpace user. Define the fllwing fields: User ID First Name Last Name Passwrd Rle (Optinal) (Optinal) Extra Data (Additinal data abut the user) Delete all selected users. Nte: Exercise cautin when yu perfrm this actin. Imprt a CSV file t add multiple new users. Edit the user fields defined when yu added the selected user. Delete the selected user. Cnfiguratin Management: Glbal NOTES: 1. Sme fields are displayed nly when yu select a specific value fr a different field. 2. grup names are in bld. The grup's cnfigurable fields fllw the grup name. Kaltura MediaSpace Setup Guide 63

64 Applicatin instanceid privacycntext userrleprfile title fter theme language enablelike enableentrytitles enableentrydelete enableviews timezne Descriptin Unique string t identify that installatin f MediaSpace. This value can be set during installatin nly. String used t be set as privacy cntext n rt categry. This value can be set during installatin nly. Metadata Prfile ID fr user's rle per KMS installatin instance What is yur MediaSpace website title? The website title is displayed in the brwser's title bar and usually is displayed in search engine results. Page titles cnsist f the name f the currently laded media and the website title. Fr example, if a page has a vide called 'My Vide' and 'MediaSpace' is the website title, the page title is: 'My Vide MediaSpace What is yur MediaSpace fter text? default is: MediaSpace vide prtal by Kaltura What is the name f yur custm MediaSpace theme? Which language shuld MediaSpace use? Nte: Language files are in /lcale/kms/{lang}/default.p. Enable the 'Like' feature fr entries. Include the media title in the URL f the media page when brwsing the site and sharing a link t the media. Enable deleting the media frm MediaSpace. Enable shwing number f views per entry. Which timezne shuld MediaSpace use t present times and dates. Client serviceurl partnerid secret adminsecret verifyssl prxy Descriptin The URL f the service fr API calls. Mdify the URL if yu use the Kaltura On-Prem Editin. Cpy yur Kaltura accunt's Partner ID frm the Kaltura Management Cnsle (KMC): KMC->Settings->Integratin Settings. Cpy yur Kaltura accunt's user secret frm KMC->Settings- >Integratin Settings ( integratin). Kaltura MediaSpace uses yur user secret t create secure sessins t access the Kaltura API. Cpy yur Kaltura accunt's administratr secret frm KMC- >Settings->Integratin Settings ( integratin). Kaltura MediaSpace uses yur administratr secret when yu need an 'admin' sessin, which allws mre actins than a user secret sessin. Set t N, if yu want t use SSL with a self-signed certificate. Cnfigure prxy settings if the HTTP cmmunicatin frm the MediaSpace server t Kaltura server has t g thrugh a prxy Kaltura MediaSpace Setup Guide 64

65 MediaSpace Administratin: Actins and Cnfigurable s Rles annymusrle viewerrle privateonlyrle adminrle unmderatedadminrle Descriptin What is the name fr the Annymus User rle? A user with annymusrle can brwse yur site annymusly until trying t access pages/actins that require lgin: My Media, My Playlists, and Add New. What is the name fr the Viewer rle? A user with viewerrle can brwse public galleries, is nt authrized t uplad new cntent, and des nt have a My Media page. What is the name fr the Private uplads rle? A user with privateonlyrle can uplad cntent t My Media, cannt publish t galleries, and can add media. What is the name fr the Admin rle? A user with adminrle can uplad cntent t all galleries and can uplad cntent. What is the name fr the Unmderated Admin rle? A user with unmderatedadminrle can uplad cntent and bypass mderatin (when mderatin is enabled fr an accunt). Auth demmde shwlgin phuser phpasswrd phlgininstructin authnadapter authzadapter allwannymus annymusgreeting sessinlifetime Descriptin Enable the dem lgin mde? After entering any user r passwrd cmbinatin, the user has an admin rle. Shw lgin / lgut menu n site header. user ID alternate field placehlder. passwrd alternate field placehlder. Lgin instructins t display in the lgin page. What is the name f the PHP class fr handling authenticatin? KalturaAuth enables the built-in User Management system (lcated at /admin/users). LdapAuth lets yu use yur rganizatinal LDAP/AD server t authenticate users. T use yur wn custm class, click 'Add custm value' and enter the custm class name. What is the name f the PHP class fr handling authrizatin? Authrizatin determines the user's rle. KalturaAuth enables the built-in User Management system (lcated at /admin/users). LdapAuth lets yu use yur rganizatinal LDAP/AD server t determine rles. T use yur wn custm class, click 'Add custm value' and enter the custm class name. Can users access MediaSpace withut lgging in? If yu select 'yes,' annymusrle users can brwse the galleries and view vides. Fr annymusrle users, links/buttns fr actins that require mre advanced rles are displayed. When an annymusrle user clicks a link/buttn that requires a mre advanced rle, a lgin screen is displayed. What text shuld be used in the header instead f an actual user name? Hw lng (in secnds) can a MediaSpace user sessin last? (The default is secnds, which equals 12 hurs.) Kaltura MediaSpace Setup Guide 65

66 MediaSpace Administratin: Actins and Cnfigurable s sslsettings refreshdetailsonlgin refreshrleonlgin frgtpasswrd link subject bdy remindersubject reminderbdy ldapserver hst prt prtcl Descriptin Select yur ptin fr a secure lgin page (via https). Yu can set a secure prtcl fr the lgin page r fr the entire site Shuld user details n Kaltura be updated thrugh an external authenticatin prvider? Shuld the user rle n Kaltura be updated thrugh an external authrizatin prvider? Select 'N' t allw verriding a rle thrugh Kaltura user management. Define the values fr the 'Frgt Passwrd' ptins. The 'link' ptins are: [1] Enter 'false' if yu d nt want a 'Frgt Passwrd' link t be displayed. [2] Enter an address preceded by 'mailt:' (withut qutes). The user's lcal client pens an with the subject and bdy ppulated with the texts defined in the ' subject' and ' bdy' fields. [3] Enter a URL fr a page that yu define (fr example, a mechanism fr reminding users f their lgin credentials). Nte: D nt enter 'true.' If yu enter an address in the 'link' field, enter the text t ppulate the subject field f the . If yu d nt want t ppulate the subject field, enter an empty string (' '). If yu enter an address in the 'link' field, enter the text t ppulate the bdy f the . If yu d nt want t ppulate the bdy, enter an empty string (' '). Fr KalturaAuth's User Management send new passwrd feature: (If authclass is set t KalturaAuth, MediaSpace expses a user management system. This system's admin can click n a user's t pen the admin's lcal client t the new passwrd t the user.) Enter the text t ppulate the subject field f the 'new passwrd' . If yu d nt want t ppulate the subject field, enter an empty string (' '). Enter the text t ppulate the bdy f the 'new passwrd' . The passwrd will be inserted autmatically at the end f the bdy text. If yu d nt want t ppulate the bdy, enter an empty string (' '). Cnfigure yur LDAP/Active Directry Server. What is the address f yur LDAP Server? What is the prt f yur LDAP Server? What prtcl des yur LDAP server use? (ldap r ldaps) prtclversin What is the prtcl versin f yur LDAP server? (V2 r V3) basedn bindmethd attribute firstnameattribute What is the base DN f yur LDAP server? Which mde f peratin is used fr authenticating with LDAP? 'Search befre bind' means that the user's DN is discvered by searching the LDAP/ad server. Direct bind means that the user's DN is cnstructed autmatically accrding t the frmat that yu specify under userdnfrmat (displayed belw when yu select Direct Bind) and n search is perfrmed. What is the name f the attribute n the user recrd that cntains the user ID? If yu d nt want t sync with Kaltura, d nt enter an attribute. What is the name f the attribute n the user recrd that cntains the user's first name? If yu d nt want t sync the first name with Kaltura, d nt enter a firstnameattribute. Kaltura MediaSpace Setup Guide 66

67 MediaSpace Administratin: Actins and Cnfigurable s lastnameattribute searchuser username passwrd usersearchquerypattern directbind userdnfrmat ldapoptins grupsmatchingorder grupsearch: bygrup grupsearchquerypattern grupsearcheachgruppattern grupsearchquery grupmembershipattribute grupsearch: byuser memberofattribute usersearchquerypattern primarygrupidattribute Descriptin What is the name f the attribute n the user recrd that cntains the user's last name? If yu d nt want t sync the last name with Kaltura, d nt enter a lastnameattribute. If annymus search is nt allwed, what is the DN f the accunt that shuld be used t bind fr searching users? Fr annymus, d nt enter a username. If annymus search is nt allwed, what is the passwrd f the accunt that shuld be used t bind fr searching users? Fr annymus, d nt enter a passwrd. Enter the pattern fr querying the LDAP server t find a user. tken will be replaced with the actual username prvided in the lgin screen. Enter the DN frmat f the username. Place tken where the username shuld be in the string. Fr example: 'cn=@@username@@,u=smegrup,dc=example,dc=cm') Cnfigure the LDAP ptins fr grup searches. Enter the rder in which t match MediaSpace rles t LDAP grups. Fr example, if a user belngs t a grup that is mapped t the admin rle, enter adminrle befre ther rles ('adminrle,viewerrle') t find the admin rle first and lg in the user with the adminrle. Enter the pattern fr querying all grups in ne query. tken will be replaced with the pattern that yu specify under grupsearcheachgruppattern (displayed belw). The query results list all grups defined in the mapping settings. Enter the pattern fr each grup in the grupsearchquerypattern (displayed abve). This pattern is used multiple times: ne time fr each grup defined in the mapping settings. The relatin between the grups is OR. Enter the LDAP query that finds all grups. This query runs nly ne time, s it returns all grups defined in the matching settings. If yu enter a value fr this LDAP query, the tw settings displayed abve (grupsearchquerypattern and grupsearcheachgruppattern) are nt used. Enter the attribute n a grup recrd that lists the users wh are members in the grup. Enter the memberof attribute t use the memberf search filter t map grups t users. Nte: The member f the search filter is nt enabled by default n all LDAP servers. Enter the pattern fr querying the LDAP server t find a user. tken will be replaced with the actual user name prvided in the lgin windw. (Optinal) Enter the attribute name fr the primary grup ID (usually Kaltura MediaSpace Setup Guide 67

68 MediaSpace Administratin: Actins and Cnfigurable s ldapgrups adminrle viewerrle privateonlyrle unmderatedadminrle matchbyprimarygrupid ss secret lginurl lguturl headerauth headername lguturl Descriptin primarygrupid). Use this field nly t authrize by primary grup ID when yu are using AD. Map yur LDAP server grups t MediaSpace grups. Enter LDAP grup names that match the MediaSpace adminrle. Enter LDAP grup names that match the MediaSpace viewerrle. Enter LDAP grup names that match the MediaSpace privateonlyrle. Enter LDAP grup names that match the MediaSpace unmderatedadminrle. Match by primary grup Id Cnfigure the built-in Single Sign On Gateway authenticatin class (SSOAuth). Enter a custm secret, r enter 'default' t use the Kaltura Admin Secret assciated with yur Kaltura accunt. What is the URL fr the SSO gateway lgin page? Nte: The 'ref' parameter is added autmatically. What is the URL t which a user is redirected after lgging ut f MediaSpace? Usually, yu enter yur rganizatin's lgin page. What is the name f the HTTP header that cntains the user ID f the authenticated user? When the allwannymus value is 'N', yu can specify a URL (instead f an 'unauthrized' page) t which the user is redirected when lgged ut. Gallery Descriptin pagesize Hw many entries can be displayed n each gallery page? (The default is 10.) pagesizewide pagecunt pagertype srtmediaby thumbnailrtatr Player Hw many entries can be displayed n each gallery page in the Wide gallery view (fr example, search results, playlists)? (The default is 24.) Hw many page links can be displayed in the gallery pager? (Dts represent page links that are nt displayed.) Which kind f paging mechanism shuld be used in the gallery page? By default, hw shuld media in the gallery be srted? Enable thumbnail image rtatin n musever in galleries playerid playereditid autplayonlad Descriptin What is the player ID (uicnf ID) f the player that plays the embedded vide? What is the player ID (uicnf ID) f the player that edits entries? When MediaSpace lads, shuld the vide that is laded in the player begin playing autmatically? Ntes: (1) Autplay is triggered when MediaSpace starts Kaltura MediaSpace Setup Guide 68

69 MediaSpace Administratin: Actins and Cnfigurable s playback Descriptin and each time a new page lads, such as when switching frm My Playlists t a gallery page. (2) The player always begins playing autmatically when a user clicks a vide in a gallery, regardless f whether autplayonlad is enabled. Which Playback methd shuld MediaSpace use? HTTP uses prgressive dwnlad and is cached in the brwser. RTMP streams data and supprts adaptive bitrates. Generally, HTTP prvides a better user experience fr seeking frward r backward, while RTMP prvides better vide quality. Hw quickly the vide begins playing depends n caching, s first time play always begins faster using RTMP and subsequent play may begin faster using HTTP. RTMP is nt frmally supprted fr MediaSpace based n the Kaltura On-Prem Editin. Widgets ksuid krecrdid rtmpurl Descriptin What is the uicnf ID f the Kaltura Simple Uplader (KSU)? MediaSpace uses KSU t uplad vides, images, and audi files. What is the uicnf ID f the krecrd widget? MediaSpace uses krecrd t recrd and uplad vide frm a webcam. What is the URL f yur RTMP Server? The URL is required fr Webcam recrding. Metadata createdbyrequired descriptinrequired tagsrequired Descriptin Require users t fill in the 'Created By' field when uplading r editing media? Require users t fill in the 'Descriptin' field when uplading r editing media? Require users t fill in the 'Tags' field when uplading r editing media? Header headerstyle lgimage lgimageurl lgalttext lglink Descriptin Which backgrund and matching theme shuld MediaSpace use fr the header? The ptins fr the lg image t display in the MediaSpace header are: [1] T display the 'lgalttext' text as the page header instead f a lg, enter 'false' r an empty string (' '); [2] Replace /assets/images/lg.jpg with a different lg image using the same filename; [3] Place a lg image using a new filename in the /assets/images/ directry and enter the filename in the 'lgimage' field. Nte: The width f the lg image affects the amunt f space available fr the Header menu. (See menu cnfiguratin belw.) The ptin t lad lg frm URL - specify the URL f the lg. If URL is specified it will be used instead f lgimage (abve). Default lg size is 325px wide X 41px high. Nte: The width f the lg image affects the amunt f space available fr the Header menu. (See menu cnfiguratin belw.) The 'lgalttext' ptins are: [1] If yu insert an image file in the 'lgimage' field, yu may enter alternate text fr the tag's 'alt' attribute; [2] If yu enter 'false' r an empty string in the 'lgimage' field, yu must enter text fr the page header. The ptins fr defining the behavir when a user clicks the lg are: [1] Enter Kaltura MediaSpace Setup Guide 69

70 MediaSpace Administratin: Actins and Cnfigurable s enableupladbuttn Descriptin 'false' if yu d nt want the lg t be clickable; [2] Enter 'hme' t display the hme page (displayed when MediaSpace pens); [3] Enter a full URL (starting with t pen a different page in a new brwser windw/tab. Enable r Disable the 'Add New' buttn in the site's header Navigatin includecategries pre type name value categry entryid pst type name value categry entryid Descriptin Select 'N' if yu dn't want the categries t display in main navigatin and nly want PRE and POST items t appear Add items t the beginning f the main menu, befre the categries. MediaSpace displays the items in the rder yu define here. The first 'pre' item must be a 'playlist' type. Select ne f the ptins: Playlist, My Media, My Playlists, Link, Categry, Entry Id, r Channels Page Enter the label fr the menu item. The label is displayed in the main navigatin bar. Enter the menu item's playlist ID r URL. Categry Item Entry Id Add items t the end f the main menu, after the categries. MediaSpace displays the items in the rder yu define here. Select ne f the ptins: Playlist, My Media, My Playlists, Link, Categry, Entry Id, r Channels Page Enter the label fr the menu item. The label is displayed in the main navigatin bar. Enter the menu item's playlist ID r URL. Categry Item Entry Id Categries rtcategry restricted categry rles Descriptin Which rt categry des MediaSpace use fr all categries and cntent? A rt categry must be defined in the KMC. Restrict categries t specific rles. Only users with the specified rle can view media in the restricted categry. Only users with adminrle r unmderatedadminrle can add media t the restricted categry. Select a categry t restrict. Select ne r mre rles that can access the restricted categry. Use 'Ctrl' t select multiple rles. Kaltura MediaSpace Setup Guide 70

71 MediaSpace Administratin: Actins and Cnfigurable s Channels Descriptin pagesize Hw many channels can be displayed n each channel page? (The default is 12.) pagecunt pagertype channelcreatr Debug Hw many page links can be displayed in the channel pager? (Dts represent page links that are nt displayed.) Which kind f paging mechanism shuld be used in the channel page? Select the minimal rle that can create Channels. lglevel kalturadebug kalturastats highlightjs enabledebugbar errrs threshld address Descriptin Debug level f the KMS Lg File (lgs/kms.lg) Enable debug lg f requests t the Kaltura API (lgs/apidebug.lg) Enable stats lg f requests t the Kaltura API (lgs/api.lg) Enable Highlighting f Javascript interactins n the pages Enable the debugbar( ) flating windw Enable sending s in case f errrs Threshld level f the Errr s (Minimum errr level t send an ) addresses t send applicatin and api errrs (multiple values allwed) Mderatin reasnsex reasnvilence reasnharmful reasnspam Descriptin Please prvide the reasns KMS users can chse fr flagging media. (If nne are prvided, the default Kaltura reasns will be used) Please prvide the reasns KMS users can chse fr flagging media. (If nne are prvided, the default Kaltura reasns will be used) Please prvide the reasns KMS users can chse fr flagging media. (If nne are prvided, the default Kaltura reasns will be used) Please prvide the reasns KMS users can chse fr flagging media. (If nne are prvided, the default Kaltura reasns will be used) Cnfiguratin Management: Mdules Addcntent NOTES: 1. Sme fields are displayed nly when yu select a specific value fr a different field. 2. grup names are in bld. The grup's cnfigurable fields fllw the grup name. enabled Descriptin Enable the Addcntent mdule. Kaltura MediaSpace Setup Guide 71

72 MediaSpace Administratin: Actins and Cnfigurable s Addtplaylists enabled allwcreatin Descriptin Enable the Addtplaylists mdule. Allw users t create new playlists frm the 'Add t Playlists' mdule? Btswatch Change the btstrap.min.css file in use by KMS. Only useable fr Btstrap based themes. T preview Btswatch themes, and create yur wn, see enabled Btstrap Captins Descriptin Enable the Btswatch mdule. Select the CSS file t use enabled captinsksuid thumbnailrtatr entriespagesize captinspagesize Descriptin Enable the Captins mdule. What is the uicnf ID f the Kaltura Simple Uplader (KSU) used fr captins? MediaSpace uses KSU t uplad.srt and.dfxp captin files. Enable thumbnail image rtatin n musever in captins search results Hw many entries are displayed as captins search results n each page? (The default is 10) Hw many captin lines are displayed fr each entry in search results? (The default is 5) Cmments enabled channelcmmentsprfileid entrycmmentsprfileid entrycmmentscuntprfileid cmmentsallwed pagesize srt srtreplies allwclse shwingalleries shwinchannels Descriptin Enable the Cmments mdule. Custm Metadata prfile Id fr channels Custm Metadata prfile Id fr entries Custm Metadata prfile Id fr entry cmments cunt Wh can add cmments? Number f cmments t display Srt cmments by newest r ldest first? Srt replies by newest r ldest first? Allw cntent wners t disable/clse cmments fr particular entries Enable/disable shwing f cmments fr entries in the gallery page Enable/disable shwing f cmments fr entries in the channels page Kaltura MediaSpace Setup Guide 72

73 MediaSpace Administratin: Actins and Cnfigurable s Cssuplad Uplad CSS files t yur KMS site enabled uplad btstrap uplad additinal Custmdata Descriptin Enable the Cssuplad mdule. Uplad an alternative btstrap.min.css file t the ne in use by KMS. Only useable fr Btstrap based themes. Uplad an additinal css file t KMS t include additinal classes nt defined as part f the standard Btstrap CSS file enabled prfileid datefrmat jsdatefrmat equireds privates Descriptin Enable the Custmdata mdule. What is the ID f the custm metadata? Cpy the custm data schema ID frm KMC > Settings > Custm Data ( metadata). What is the frmat f the date fr the datepicker (server side)? What is the frmat f the date fr the datepicker (client side)? Which custm data fields are required when uplading r editing media? Use custm data System Names frm KMC > Settings > Custm Data ( metadata). Which custm data fields are nt displayed in MediaSpace? Use custm data system names frm KMC > Settings > Custm Data ( metadata). Nte: Private custm data fields are nt hidden when the media wner accesses the media frm My Media. ntificatins Click n the dedicated page link in this screen t get t the page where yu can enable the different ntificatin events and define the templates fr each. enabled Embed Descriptin Enable the ntificatins mdule. enabled embedallwed embedskins name imgfile Descriptin Enable the Embed mdule. Select ne r mre rles that can use the Embed mdule. Use 'Ctrl' t select multiple rles. Define skins that can be used fr embedded players. What is the name f the skin? The skin name is displayed when the user selects an embed skin. What is the relative path t the image file n the server? The image Kaltura MediaSpace Setup Guide 73

74 MediaSpace Administratin: Actins and Cnfigurable s uicnfid embedsizes large medium small Descriptin file represents hw the skin lks. What is the numerical value f the player ID t use in the embed cde? Define sizes that can be used fr embedded players. Define the player size in the fllwing frmat: {width}x{height} Embedplaylist enabled embedallwed embedskins light_hrizntal dark_hrizntal light_vertical dark_vertical embedsizes hrizntal vertical Descriptin Enable the Embedplaylist mdule. Select ne r mre rles that can use the Embedplaylist mdule. Use 'Ctrl' t select multiple rles. Define skins that can be used fr embedded playlists. Define sizes that can be used fr embedded playlists. Facebk Add the pen-graph metadata t the view media page t supprt embedding vides in a Facebk feed by simply cpy and pasting the URL f the media page enabled fplayerid Headermenu Descriptin Enable the Facebk mdule. What is the player ID (uicnf ID) f the player that plays vides n Facebk? enabled menu type label link Descriptin Enable the Headermenu mdule. Define the items that are displayed n the tp right in the header menu. Type can be My Media, My Playlists, URL, Menu, r My Channels. Fr a URL, enter the URL label. Fr a Menu, enter the label. Enter a URL. A URL that starts with pens in a new windw. Kaltura MediaSpace Setup Guide 74

75 MediaSpace Administratin: Actins and Cnfigurable s items label link Descriptin A menu item cnsists f a label (text) and a link (URL). Enter the label fr the menu item. Enter a URL. A URL that starts with pens in a new windw. Hme enabled thumbnailrtatr caruselenabled carusel type caruselbg playlistid lists type Name playlistid Descriptin Enable the Hme mdule. Enable thumbnail image rtatin n musever in hmepage Shw the carusel Select cntent fr the Carusel: Mst Recent, Mst Viewed, Mst Liked, Mst Cmmented r Custm Playlist carusel backgrund clr Enter a custm playlist ID Select cntent fr the list: Mst Recent, Mst Viewed, Mst Liked, Mst Cmmented r Custm Playlist Enter the list name t display Enter custm playlist ID Oembed enabled type enablecustmizatin playerid height Descriptin Enable the Oembed mdule. Which type f Embed cde shuld be displayed? 'Shrt' is the cmmn type. Fr example: where xyz is the media asset ID (entry ID). 'Shrt' links are valid URLs. A 'Shrt' link entered in a brwser lads MediaSpace with the vide laded in the player. 'Full' is much lnger than 'Shrt.' Use 'Full' when yur Embed 'cnsumer' cannt cnvert a link embed cde t a full Embed request. When a user selects 'Embed' fr the 'Select Embed Type' ptin, shuld the ptins fr selecting a player skin and player size be displayed? Nte: If yu enable custmizatin, yur Embed must be able t accept the Embed link frmat that is created. What player ID (uicnf ID) shuld be used t display the embedded vide? Nte: If yu are nt sure, enter 'default' (withut qutes) r leave the playerid field empty. MediaSpace will use the value f the first embedskin cnfig. What is the height (in pixels) f the Embed player? Enter nly the number. Kaltura MediaSpace Setup Guide 75

76 MediaSpace Administratin: Actins and Cnfigurable s width Descriptin What is the width (in pixels) f the Embed player? Enter nly the number. Publish enabled Descriptin Enable the Publish mdule. Related enabled limit Descriptin Enable the Related mdule. Hw many related vides can be displayed? Screencapture enabled ksrid videbitrate advancedoptinsenabled Descriptin Enable the Screencapture mdule. What is the widget ID (uicnf ID) f the Kaltura Screen Recrder Widget (KSR) used in MediaSpace? The vide bitrate quality (in kbps) t use fr the capture. Fr example 2000 Enable the ptin t select frames per secnd by the user Sidemymedia enabled limit Descriptin Enable the Sidemymedia mdule. Hw many Sidemymedia items can be displayed? Sideplaylists enabled limit items label id Descriptin Enable the Sideplaylists mdule. Hw many items can be displayed in a side playlist? Define playlists t display n the right side next t the player. Enter the playlist label. Enter the ID f the playlist t display. Kaltura MediaSpace Setup Guide 76

77 MediaSpace Administratin: Actins and Cnfigurable s Categry Mdules Categrymembers enabled Descriptin Enable the Categrymembers mdule. Categrymderatin enabled Descriptin Enable the Categrymderatin mdule. Channel Mdules Channelcategries This mdule allws users t assciate channels t categries and replaces the ChannelTpics mdule. enabled channelcategriesprfileid Descriptin Enable the Channelcategries mdule. The prfile id f the Channel Categries metadata prfile. Channelmembers enabled Descriptin Enable the Channelmembers mdule. Channelmderatin enabled Descriptin Enable the Channelmderatin mdule. Channelsubscriptin enabled channelsubscriptinprfileid Descriptin Enable the Channelsubscriptin mdule. Custm metadata prfile id fr string whether channel subscriptin is enabled fr channel Channeltpics enabled Descriptin Enable the Channeltpics mdule. Kaltura MediaSpace Setup Guide 77

78 MediaSpace Administratin: Actins and Cnfigurable s prfileid tpic Descriptin What is the ID f the Channel Tpics metadata? Cpy the custm data schema ID frm KMC > Settings > Custm Data ( metadata). What field cntains the available Channel Tpics? Use custm data System Name frm KMC > Settings > Custm Data ( metadata). Entry Type Mdules Audientry audiplayerid audiplayerheight Descriptin What is the player ID (uicnf ID) f the player that plays audis? What is the height f the player that plays audis? Imageentry imageplayerid imagewatermarkurl Descriptin What is the player ID (uicnf ID) f the player that shws images? What is the URL f the image that shuld be used as watermark? Videpresentatins enabled srtmediaby kpwid kvpmdcupladid kvpmcreatinid Descriptin Enable the Videpresentatins mdule By default, hw shuld media in the gallery be srted? What is the widget ID (uicnf ID) f the Kaltura Vide-Presentatin Widget used in MediaSpace? What is the uicnf ID f the Kaltura Dcument Uplad widget? The Kaltura Dcument Uplad widget is used by the Kaltura Vide- Presentatin widget. What is the uicnf ID f the Kaltura Vide-Presentatin widget? The Vide-Presentatin widget enables users t synchrnize vide with PwerPint presentatins. Webcast NOTE: This mdule is used with InterCall Webcasting nly. enabled intercallwebcastprfileid Descriptin Enable the Webcast mdule The prfile id f the webcast metadata prfile. Kaltura MediaSpace Setup Guide 78

79 MediaSpace Administratin: Actins and Cnfigurable s srtmediaby expirytime Descriptin By default, hw shuld media in the gallery be srted? The sessin expiratin time (in secnds) sent in the entry link. Keep it as shrt as pssible. Kaltura MediaSpace Setup Guide 79