Single sign-on

Single sign-on allows users to sign into Kumu with an existing set of login credentials—in other words, they won't have to create and remember a new username and password specifically for Kumu.

To configure SSO for your Enterprise instance, follow the instructions in this guide.

  1. Create a personal account in your Kumu Enterprise instance.

  2. Create an organization in Kumu using your personal account.

  3. Follow the instructions to set up your Kumu application with any SAML-2.0-based single sign-on provider. Here are a few links to the documentation for common providers:

    When setting up your app, you can use Kumu as the app name, and for the Entity ID, you should enter the following, replacing organization-username with the username of your Kumu organization account:

    https://example.kumuenterprise.com/organization-username
    

    For the Reply URL (Azure) or ACS URL (Google Suite), use the following, once again replacing organization-username with the username of your Kumu org:

    https://example.kumuenterprise.com/organization-username/sso/saml/consume
    
  4. From your SSO provider, you can get a service URL, an entity ID, and a public certificate. Enable SSO for your enterprise and copy/paste those items into your Kumu organization accounts' settings:

    https://example.kumuenterprise.com/organizations/organization-username/settings#sso
    

    Kumu Enterprise SSO settings

  5. With Kumu and your SSO provider configured, you can use your SSO provider to give users access to Kumu. Users can begin the sign-in flow by visiting the url below:

    https://example.kumuenterprise.com/organization-username/sso
    

Single sign-on with Azure

If Microsoft Azure is your single sign-on provider, you can follow the instructions below to set up.

  1. Click the "Azure Active Directory" button in the sidebar

    Azure SSO step 01

  2. Click "Enterprise Applications"

    Azure SSO step 02

  3. Click "+ New Application"

    Azure SSO step 03

  4. Click "Non-gallery application"

    Azure SSO step 04

  5. Enter "Kumu" for the name of the application

    Azure SSO step 05

  6. Click "Configure single sign-on"

    Azure SSO step 06

  7. Select "SAML-based Sign-on"

    Azure SSO step 07

  8. Enter the "Kumu Domain and URLs" for your organization (provided by Kumu)

    Azure SSO step 08

  9. Select "user.mail" for the user identifier

    Azure SSO step 09

  10. Download the SAML signing certificate (Base 64)

    Azure SSO step 10

  11. Click "Configure Kumu"

    Azure SSO step 11

  12. Copy the service url, entity id, and public certificate over to your organization's SSO settings in Kumu:

    Azure SSO step 12

    Azure SSO step 12.5

  13. Within Azure AD, assign users to the Kumu app you just created to enable SSO

    Azure SSO step 13

edit this page

results matching ""

    powered by

    No results matching ""