WeVideo allows users to sign in to their account with their school or organization accounts through the SAML 2.0 Single Sign-On (SSO) service. Please see this article for more information on setting up SAML SSO integration for your WeVideo license and allowing users in your organization to access their accounts through SAML SSO.
Before you start
- The SAML integration requires settings from both the user's and WeVideo's ends. Please contact your Customer Success Manager to get started.
- Have access to the administrator role in your SAML identity provider (IdP) with permission to create a SAML 2.0 application.
- Have access to an active WeVideo license for your organization.
Set up the SAML integration
1. In your SAML identity provider (IdP), create a SAML 2.0 application with the following values. If your identity provider supports importing metadata, you can use the WeVideo metadata URL instead: https://www.wevideo.com/api/5/saml/metadata
| Settings | Value |
| Entity ID (Audience URI) | https://www.wevideo.com/api/5/saml/metadata |
| ACS URL (Reply URL) | https://www.wevideo.com/api/5/saml/acs |
| Single Logout URL | https://www.wevideo.com/api/5/saml/sls |
| NameID format | Any format is accepted (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified) |
| Signed assertions | Required |
| Signed response | Optional |
| Assertion encryption | Supported, not required |
2. After entering the above values, configure the user attributes by entering the following attributes into the SAML assertion. You can use either the OID name or the friendly name for each attribute.
| Attribute | Name (OID) | Friendly name |
| urn:oid:0.9.2342.19200300.100.1.3 | ||
| First name | urn:oid:2.5.4.42 | firstName |
| Last name | urn:oid:2.5.4.4 | lastName |
| User ID | urn:oid:0.9.2342.19200300.100.1.1 | id |
3. Assign the users or groups who need WeVideo access to the application. Only assigned users can sign in to WeVideo through SSO. A WeVideo account will be created automatically when the assigned user signs in through the SAML SSO for the first time.
4. Send your identity provider's metadata URL or XML file to your Customer Success Manager. WeVideo will configure the connection and let you know when it is ready to test.
5. After receiving confirmation from WeVideo that the SAML application is connected and ready to test, sign in to WeVideo with a test user from your identity provider using the created SAML application to confirm the account is created in WeVideo and that the test user can access the account through SAML SSO.
User's experience
After setting up the SAML application, users in your organization can access WeVideo with the created WeVideo SAML application in your sign-in portal.
Troubleshooting
Encounter an error when mentioning the audience or Entity ID
Make sure the Entity ID in your identity provider exactly matches the value in the first step in the Set up the SAML integration section.
Encounter an error when mentioning the issuer or certificate
The identity provider's metadata may have changed. Please check and send the updated metadata to your Customer Success Manager.
User cannot access WeVideo from the sign-in portal
Only the assigned users can access WeVideo from the sign-in portal. Please make sure the user is assigned to the WeVideo application in your identity provider.
Encounter other issues or errors when using the SAML application
If you encounter any other issues or errors when using the SAML application, please take a screenshot of the error message and share it with WeVideo Support or your Customer Success Manager.
For more support and troubleshooting, visit our Help Center. New to WeVideo? Try for free or contact our team to learn more.