Groups are ways to segment your users into different audiences and restrict content to those audiences. End users will have no concept what groups they have been placed in to allow more flexibility for administrators to create groups for podcasting that may not make sense to the end users.
How to Create a Group:
Creating groups is available in the Product Management Console (PMC) through the “Administration Section” on the bottom left.
- In Administration navigate to the groups section.
- Click the plus button on the top right or the “create group” button if you have not started creating groups
- Fill in the “Display Name” in a way that your content team will be able to recognize and understand as they restrict show content. This name will not be shows to the listener and will only be viewable to those that have access to the PMC.
- If you are connecting your groups to your single sign on process, please reference the SSO section for the IdP Identifier. If not, skip over this field to create the group within the PMC only.
- Fill in the “Description” to help your internal admin team understand who may fall into this group.
- Select “Create Group”
Mapping SSO Sent Groups to uStudio Groups
PMC administrators will have the ability to create groups within the PMC and map those groups to attributes that will be sent over from their IdP along with their users. uStudio provides a standard SAML claim to our customers in order to retrieve the proper group Information for a single user when they login to the podcast app. There are two steps to this mapping:
Step 1: Format SAML Group Attributes
The SAML assertion requires an attribute to relay the group information. For existing SSO connections, this may require changes to the way the IdP sends attributes by default.
Expected SAML assertion format:
Note: The only portion of this format that can be customized are highlighted in yellow. These should use the group names you would like to sync:
<saml:Attribute Name=”groupName” NameFormat=”urn:oasis:names:tc:SAML:2.0:attrname-format:basic>
<saml:AttributeValue xsi:type=”xs:string”>Company Group Name4</AttributeValue>
<saml:AttributeValue xsi:type=”xs:string”>Company Group Name3</AttributeValue>
<saml:AttributeValue xsi:type=”xs:string”>Company Group Name2</AttributeValue>
<saml:AttributeValue xsi:type=”xs:string”>Company Group Name1</AttributeValue>
</saml:Attribute>
This is a one-way method (via SAML). An admin in Podcast Management Console (PMC) will not be able to change group membership - this is managed on the company’s SSO.
- Group memberships are synced upon user login. If a user never logs out, the user’s group memberships may be out of date since a new SAML assertion will never be sent.
- SSO can create and update a user’s group membership
- Group permissions must be manually assigned in the PMC Shows page
Step 2: Map Group in PMC to SAML Attribute:
- In Administration navigate to the groups section.
- Click the plus button on the top right or the “create group” button if you have not started creating groups
- In the “IdP Identifier” Field put the group name that you created that is highlighted in yellow in Step 1.
- Make sure display name and description are what you would like to see in the PMC when creating content and save.
- Users should now be added
