VIDIZMO for Sharepoint 2010 – Step by Step Installation

I have already spoken about the utility of VIDIZMO for SharePoint add on. So without waiting any further let me show you the steps
to install it on SharePoint 2010 environment. The difference between installing
for SharePoint 2010 and MOSS 2007, is only minor. So most of the steps apply
for both the environments.

Pre-requisites

First and foremost, you need following before you can even think about installing VIDIZMO for SharePoint

  1. SharePoint 2010/MOSS 2007 Standard/Enterprise version installed on machine
  2. In case of MOSS 2007, you additionally need Service Pack 2 installed
  3. SharePoint 2010 should have latest windows updates and should be configured with following services up and running:
    • Microsoft Office Server 2010
    • Search Service (Federated Search)
    • Timer Service
  4. Since VIDIZMO for SharePoint interacts with instance of SharePoint installed, it further needs ‘Windows SharePoint Services Administration’ service running on the server. Go to Administrative Tools > Services and make sure its running before you run setup
  5. You’ll need to run setup under a user that has administrative level access to SharePoint configured and he must have local system administrator rights. He should be added in local system ‘Administrators’ group
  6. And finally, you’ll need a Channel created at VIDIZMO before you begin installing. VIDIZMO for SharePoint utilizes your existing VIDIZMO Channel information and content using your Login credentials. If you do not already have VIDIZMO Channel, you can sign up a FREE 30 Day trial by clicking here
  7. Once your channel is set up, you need to add your SharePoint domain to trusted domains on channel
    Select “Update Channel” page from “Settings” Tab then Channel details drop down

      1. Select “Update Channel” page from “Settings” Tab then Channel details drop down
        ChannelDetail
      2. Under “Security” tab there is an text box field name “Trusted Domains”
      3. Add your SharePoint site in trusted domain, as shown in snapshot below

    ChannelDetail2

Let the setup begin…

After making sure everything stated above is in place, let’s start the installation procedure.

  1. Run the main setup.exe by right click and Run as administrator.
    runAsAdmin
  2. Provide the administrator Login Id and Password for your Channel at VIDIZMO and click ‘Verify Credentials’
    LoginScreen
  3. If there are more than one Channel associated with the login id, a drop down showing all the Channels will appear. Select appropriate Channel from the drop down and Click ‘Next’
    LoginChannelDetail
  4. In the ‘Site Settings’ tab, provide your SharePoint Site URL and click verify button
    SiteSettingSPUrl
    Next, on same screen, y0u can Install VIDIZMO for SharePoint as Top Level site or as a Sub-site:

        a- When setting up as Top Level Site select Top Level Site as shown below:

    whenToplevel

        b- Or choose sub-site option and provide name and title as you like:

    whensubsiteNote: Setup will create a new site within SharePoint Site Collection based on the information provided at this step. For example, in the screenshot above, setup will create a site on http://moss2007.pdomain.com/VIDEO_PORTAL. The new site will automatically be configured with VIDIZMO Channel information provided earlier

    Site Settings

    SharePoint   Absolute URL Type   your valid SharePoint absolute URL. Setup will check this URL before   proceeding to next step. For Example: http://MySharePoint.MyCompany.com. Please   note that this URL should must exist in Alternate Access Mapping
    Site   Name Provide   the Sub site Name (optional – when choosing sub-site). Setup will create a   sub site in your SharePoint Site. We recommend using “VIDIZMO’ as your site   name. For Example: Your sub site address will look like:
    http://MySharePoint/VIDIZMO or http://vtlssp2010dev.softech.us/VIDIZMO
    Site   Title Provide   sub site title for your sub-site
    After   deployment your VIDIZMO for SharePoint URL will be Once   the setup is completed successfully. Your channel users will use this link   and enjoy VIDIZMO in your SharePoint.
  5. Go to ‘Site Template’ and select an appropriate Site Template from the list available by clicking on it. Setup shows all the Templates available in the SharePoint environment you chose at the first tab. Once the information has been provided, click on checkbox
    below to enable NEXT button. Pressing NEXT will take you to the next step.
    chooseSiteTemplate
    Note: Though VIDIZMO doesn’t stop you from choosing any template, there are some that have been approved by VIDIZMO for use and hence are recommended.

    Site Template

    Vidizmo   approved Setup   requires you to select a sub site template from this list of Vidizmo approved   templates. This is the list of templates that work properly with VIDIZMO   based on its specific requirements. It is highly recommended to select a   template from among this list.
    All   templates This is   the list of all site templates available for your selected SharePoint site   including custom templates. VIDIZMO for SharePoint is not guaranteed to work   with these templates, if you have a custom template that you’d like to use   VIDIZMO for SharePoint to work with, please contact VIDIZMO technical support   team at support@vidizmo.com for   any queries.
  6. Click on the ‘I have verified all Settings’ check box and click ‘Next’
    verifiedSPLink
  7. The setup will check for pre-requisites and ensure everything is in order before initiating the installation procedure. Here’s how the next step should look like before moving on to Next step. If setup clears everything, click ‘Next’
    SPServiceCheckListNote: In case, setup detects anything missing, such as Search Service etc. it’ll show error icon in red next to the line item. In such case, you’ll have to resolve the problem and run the setup again.
  8. Accept EULA by selecting ‘I accept the terms in the License Agreement’ and click ‘Next’
    EULA
  9. Setup lists all the available web application in the instance of your SharePoint Server whose URL was provided in second step. Further, Setup will detect the web application from the list to start solution installation and deployment. Click ‘Next’
    FarmDeploymentNote: SharePoint (MOSS 2007 and SharePoint 2010) both create Web Applications, with Site Collection under them, which contains the actual site. So at this step, setup will automatically choose appropriate Web Application. Normally it doesn’t make sense to deploy VIDIZMO for SharePoint on Administrator or SSP applications
  10. Setup will start installation of VIDIZMO for SharePoint as shown below…
    InstallingStartedInstallingFinished
  11. Finally click ‘Next’ after the setup is complete
  12. Press Close button to exit the Installation Setup.
    finished
    After the installation is complete, go to the site URL provided in Site Settings tab in Fourth step above and start watching Rich Media Presentations published in VIDIZMO channel right from SharePoint environment.Facing problems in installation, check VIDIZMO for SharePoint troubleshooting sectionWant to see how the website will look like, visit VIDIZMO for SharePoint – a quick glance!
Posted in VIDIZMO Overview | Leave a comment

Difference between VIDIZMO ID Connector & ADFS SSO

With our last VIDIZMO release in December 2012, we added several new features. Among them was integration with Microsoft Azure ACS. With this feature, a VIDIZMO Channel can be integrated with Facebook, Yahoo! ID, Google ID, Windows Live ID, Enterprise Active Directory and several other Identity Providers. So basically what this means is, now a Facebook user can login to a Channel with the same Login Id and Password that he uses to login Facebook. Same goes for Yahoo!, Google and other Ids.

For those of you who are not familiar with Access Control Service or ACS, is a Windows Azure service that provides an easy way of authenticating users who need to access web applications such as your VIDIZMO Channel on the Cloud or On-Premise and other services without having to factor complex authentication logic. It supports several globally supported

This is quite a powerful feature for anyone looking to open up Channel to a huge user base as big as Facebook, Yahoo! ID, Google ID and Windows Live ID users, combined! That’s a BILLION plus users (at the time of writing just Facebook claims to have 1 billion users) right there.

However for Enterprises, this means having another option for Enterprise User authentication and providing centrally controlled access to a Corporate Channel (another option is to use VIDIZMO ID Connector of-course). With this post I wanted to highlight how different this new option is as compared to VIDIZMO ID Connector. I have tried to compare the two options, both from feature point of view as well as how different they are in terms of installation & administration.

Note: I have not delved into much detail here but have tried to make it as short and concise as possible

User Synchronization

With Azure ACS, users are only authenticated and given access to VIDIZMO Channel on need basis. It doesn’t come with any synchronization feature that can sync users b/w Enterprise AD and VIDIZMO Channels. VIDIZMO ID Connector on the other hand has built in synchronization tool that provides great control and depth on who gets access to which channel. This automatically creates as well as removes any unwanted user accounts from VIDIZMO Channel. Azure ACSthough blocks access for any disabled users since it is in the end relying on AD to do authentication.

Domain/OU/Group Mapping

Azure ACS primarily provides a way to authenticate user from ADFS. It doesn’t allow defining rules for accessing Channel. VIDIZMO ID Connector though has a feature where you could define which Domain, OU or Group in Enterprise AD gets access to which Channel. With this feature, IT and Business can easily control Access Rights for Enterprise Users, allowing them having finer control over user access and their privileges.

Rule Based Access

If Domain/OU/Group mapping is not enough, you can further create custom rules that utilizes other AD attributes to allow or deny access to VIDIZMO Channels in VIDIZMO ID Connector. For example you can allow all users who are part of HR ‘Department’ or who have Managers ‘Designation’ or who have ‘EmployeeID’ etc. in these examples, Department, Designation and EmployeeID has to be a field in AD that you can use in your rule. These rules however apply on all Channels and cannot be used for individual Channel access. This feature doesn’t exist with Azure ACS.

Support for Multi-Channel

If organization has multiple Channels and wants to use Azure ACS, it has to be administered & configured for each Channel separately. However in VIDIZMO ID Connector you can add multiple Channels and configure Rules as described above at a central place. This allows central configuration as well as management of all Enterprise Channels across the board.

Security

This is a big concern for Enterprises and I felt must be included in the list. Azure ACS as well as VIDIZMO ID Connector both work on the principle of delegated authentication, where one party is a Relying Party and other one being the Identity Provider. And both of them do authentication pretty much the same way. Azure ACS (via ADFS) as well as VIDIZMO ID Connector use NTLM/Kerberos authentication to validate the user, following with an exchange of claims between them and VIDIZMO Channel. These claims are encrypted and therefore cannot be interfered with or modified.

Installation

Microsoft Azure ACS works with ADFS installed on premise to authenticate Enterprise AD users. So as long as ADFS is installed, published directly or through ADFS Proxy, there’s no further installation required to make use of Azure ACS.

For VIDIZMO ID Connector however, there’s a software that has to be installed on a server machine, which should be part of the Domain/Forest that has the user base you want to allow access to your Channel. This software can be installed on an IIS running Windows box with SQL Server, and published to internet.

Configuration

For Azure ACS, there are two places where configuration has to be done. One is on the ADFS installed on premise and other part being on the Azure ACS end. On ADFS, the Relying Party Trust has to be established between ADFS and Azure ACS, with Azure ACS being the Relying Party. On Azure ACS on the other hand, ADFS has to be added as Identity Provider to delegate authentication. ADFS configuration normally is done by the customer, while Azure ACS depending on the Azure account being used, will be done by Customer or VIDIZMO.

VIDIZMO ID Connector requires configuration on the server box where its installed as well as on VIDIZMO Channel. This configuration involves setting up Database, Sync Configuration & Global Settings, Adding Channels and Defining Channel Mappings to Domain/OU/Groups. VIDIZMO ID Connector has to be published on internet as well, preferably on HTTPS. On Channel end, administrator has to set VIDIZMO ID Connector URL for the Channel.

Conclusion

To sum it up, following chart provides a high level overview of what was discussed above.

VIDIZMO ID Connector Azure ACS – ADFS
User Synchronization Available Not Available
Domain/OU/Group Mapping Available Not Available
Rule Based Access Available Not Available
Support for Multi-Channel Available Available with per Channel ACS/ADFS setup required
Security NTLM/Kerberos Authentication + Encrypted Claims NTLM/Kerberos Authentication + Encrypted Claims
Installation Windows Server + IIS + SQL Uses existing ADFS
Configuration Database + Sync + General Configuration + Publishing Adding Trusted Relying Party in ADFS

As you can see both products have overlapping functionalities with some Pros & Cons. They both primarily do the same thing but in different ways. Based on Business & IT requirements and existing infrastructure, you should go for the product that suits you more.

So which one is it?

Posted in ID Connector | Tagged , , , | Leave a comment

Setting up SSO using ADFS

In my last post, I talked briefly about a new feature that allowed SSO using ADFS. In this post, I’ll tell you how to set this up and make it working.

The target audience for this post are mainly IT/Network/Infrastructure Administrators who have administrative rights on organization’s Active Directory and ADFS implementation. This blog post assumes you already have ADFS 2.0 installed in your Enterprise and have published it on internet as well. In case you are using ADFS Proxy, the steps may slightly change.

There are basically 2 steps to get this working,

  1. You need to configure ADFS installed within Enterprise
  2. Provide some information back to VIDIZMO Support, to let them do their part of configuration

This blog of course is about configuration required on ADFS end.

To setup ADFS, you have to do two things basically, one, setup Relying Party and second, setup Relying Party Claim rules. So here you go…

ADFS Relying Party Configuration

You will need to add VIDIZMO ACS as a relying party in your organization ADFS 2.0 server to authenticate your Active Directory users with VIDIZMO Application. Here are the steps:

  1. Open the ADFS 2.0 Management console and select Relying Party Trusts.
  2. Select add Relaying party Trust… from the top right corner of the window.

The add wizard should appear.

3.   Click Start to begin

4.   Select Import data about the relying party publish online or on local network

5.   Provide following URL in Federation metadata address:

https://vidizmo1-ac.accesscontrol.windows.net/FederationMetadata/2007-06/FederationMetadata.xml

6.   Click Next button

7.   Provide display name Vidizmo ACS

8.   Click Next button

9.   Select option Permit all users to access this relying party

10.   Click Next on the Ready to add a page and clear the “Open the Claims[FMS3] ”[AK4]  when this finishes check box

11.   Close this page

12.   The Relying Party appears in the window

13.   Right-click on the Relying Party trust and select Properties

14.   Browse to the Monitoring tab VIDIZMO ACS URL will appear on Relying party’s federation metadata URL click on Test URL button. Following message should appear “The federation metadata URL was validated successfully”.

Now with first part done, we have to add Claim Rules

ADFS Relying Party Claim Rules

Edit the Claim rules to enable proper communication with VIDIZMO ACS.

  1. Right-click on the Relying Party and select Edit Claim Rules.
  2. On the Issuance Transform Rules tab select Add Rules.
  3. Select Send LDAP Attribute as Claims as the claim rule template to use.
  4. Provide the Claim a name such as Get LDAP Attributes.
  5. Set the Attribute Store to Active Directory, the LDAP Attribute to E-Mail-Addresses, and the Outgoing Claim Type to E-mail Address.ADFS 1
  6. Repeat the above given steps to add following Claim types.
LDAP Attribute
Outgoing Claim Type
E-Mail-Addresses
E-Mail Address
Given-Name
Given Name
Display-Name
Name
User-Principal-Name
UPN
Display-Name
Common Name
Token-Groups – Qualified by Domain Name
Group
Surname
Surname
  • 7.   Select Finish
  • 8.  Select Add Rule
  • 9.  Select Pass Through or Filter an Incoming Claim as the claim rule template to use.

10.   Give it a name such as Passing through Email Address.

ADFS 2

Incoming claim type should be E-mail Address and the Outgoing format is Email.

11. Repeat the above given steps to pass through following claim values and click Finish.

    1. E-mail Address
    2. Given Name
    3. Name
    4. UPN
    5. Common Name
    6. Group
    7. Surname

This takes care of the configuration on ADFS end.

Once you are done with the rules, you will need to provide following information regarding your ADFS implementation to VIDIZMO support team.

1. ADFS WS-Federation metadata URL, example:

https:// [ADFS domain] /FederationMetadata/2007-06/FederationMetadata.xml,

Click here for more details.

2. Realm: uniquely identify that ACS identity provider use during protocol transactions. Click here for more details

3. A Test Active Directory account with minimum privileges to successfully authenticate. This is optional and only required if you would like VIDIZMO to test and validate Singe Sign On function.

You can send this information via email to support@vidizmo.com and/or the VIDIZMO account manager you are engaged with. VIDIZMO team will use this information to configure Single Sign-on with your VIDIZMO account.

Once completed, VIDIZMO support will get in touch with you to verify Single Sign On function from your end. Happy SSOing!

Posted in VIDIZMO Overview | Tagged , , , | Leave a comment

Single Sign On (SSO) using ADFS, now possible!

If someone asks me what one problem Enterprises face the most and repeatedly, with new Video SaaS systems or just any other IT/Software Service they purchase, then my answer would be Single Sign On! This has been and will remain such a fundamental problem that it often becomes a deal breaker for most Enterprises, and with VIDIZMO, a deal maker.

Just last December, we launched a new cool feature for Enterprises. This feature allowed them to capitalize on existing infrastructure by utilizing already installed ADFS to provide Single Sign On to the Enterprise users. Although we already had a product in this space for quite some time now i.e. VIDIZMO ID Connector, however Enterprises have always been eloquent (and rightly so) for using existing IT Resources they have established and are maintaining. This feature does exactly that.

VIDIZMO Channels can now be integrated with ADFS (and therefore with Enterprise AD) sitting inside/published to internet, to let users use their Enterprise ID/Password to login to their Channel. These users no longer have to be ‘Invited’ to their or require a separate Login ID and password, they can simply go to their Channel setup with ADFS, hit the Sign In button on top, and click on the new Sign In option they are getting to Login.

Soon I’ll post steps on how one can setup this feature and make use of ADFS. Well, there’s still one part of the configuration that has to be done by us so don’t forget to speak to our support!

Posted in VIDIZMO Overview | Tagged , , | Leave a comment

Small Scale Video Production Best Practices

Editor’s note: This is a guest post from Mark Hislop, President Video Impressions, a full service video production company based out of Chicago, IL and a VIDIZMO Partner. Established in 1981, VI has become one the midwest’s largest production and post production companies, renowned for its broadcast, corporate, and industrial productions.

If you are looking to increase your video quality while recording either a live event or footage for on demand access, there are several points to consider.

  1. Camera
    Most cheap web cams have a fixed focal length and automatically adjust focus and exposure, resulting in a constantly changing image.  A proper camera should be capable of adjustable focus, zoom, and aperture.  The user needs to be able to set the right zoom range, and lock in the focus and iris so that the image doesn’t change while recording.  Typical consumer or “prosumer” cameras fit this bill.  Examples are the Sony Handycam series, Canon Vixia series, and Panasonic HC-V700 series camera.  Prices range from $300 to $700 typically.  These are all HD cameras, and can be used to feed a signal directly into a computer or encoder for live streaming.  Or they can be used to record footage, which is then edited and uploaded for VOD.  If they are being used for live streaming, and being fed directly into a computer, then usually a video capture device will be required.  Examples are Sabrent USB-AVCPT, BlackMagic Design UltraStudio, or Diamond VC500.  Prices range from $30 to $375.

  2. Tripod
    One of the most causes of poor video quality is lack of a stable image.  The camera view wobbles around because somebody is trying to hand-hold the camera.  An inexpensive tripod will solve this problem.  The cameras I have recommended above are all lighter than a 35mm DSLR camera, so any lightweight photographic tripod will work.  Typical prices are $25 to $150.

  3. Lighting
    No matter how good the camera is, poor lighting will cause a poor image.  Most people try to record in typical office lighting conditions.  This means all of the light comes from above, resulting in dark shadows in the talent’s eye sockets.  A couple of inexpensive lights positioned slightly above the talent, and at 45 degrees to each side of the talent make a big difference in the final result.  Even better results are obtained when using the industry standard 3-point lighting techniques.  A tutorial on 3-point lighting can be found in this clip. http://www.youtube.com/watch?v=AcMX1RcNRYA

  4. Audio
    Audio is usually the forgotten step-child of video.  Typically people use the poor quality microphones on laptops, or the camera mounted microphone.  The problem in these cases is that the microphone is far away from the talent, so it picks up all of the extraneous room noise, and the talent sounds very far away.  It is very important to have a close-coupled microphone on the talent in order to get professional audio results.  By close-coupled, I mean that the microphone is either clipped on to the talent (a lavaliere microphone,) or within 12 inches of their mouth (a boom microphone or a table microphone).  Decent quality microphones can be obtained from sources like Radio Shack for prices ranging from $30 to $300.  These microphones can be connected directly to a computer or encoder for live web casts, or connected to the cameras listed above for recording media to be used later in VOD presentations.
Posted in VIDIZMO Overview | Leave a comment

VIDIZMO – An Introduction

VIDIZMO.COM is a Rich Media Suite providing SCORM Compliant Live and On-Demand Video Presentations, Lecture Captures and Webcasts for Training, Learning, Workforce Development and Corporate Communication.

Create Presentations, gauge knowledge using branch-able quizzes and surveys, view detailed analytics and issue evaluation certificates based on reports. Monetize presentations and earn revenues. Silverlight built, web based  platform integrates with LDAP (Active Directory), CDN services, Microsoft SharePoint, Live Meeting, C/XRM, Windows Live ID & all leading LMS including Blackboard, Moodle etc. and is available as on-premises & off-premises (cloud) offering.

VIDIZMO Components

Posted in online video platform, VIDIZMO Overview | Tagged , , , , , , , , , , | 1 Comment

VIDIZMO for Sharepoint 2010 – Step by Step Installation

I have already spoken about the utility of VIDIZMO for Sharepoint add on. So without waiting any further let me show you the steps to install it on Sharepoint 2010 environment. The difference between installing for Sharepoint 2010 and MOSS 2007, is only minor. So most of the steps apply for both the environments.

Pre-requisites

First and foremost, you need following before you can even think about installing VIDIZMO for Sharepoint

  1. Sharepoint 2010/MOSS 2007 Standard/Enterprise version installed on machine
  2. In case of MOSS 2007, you additionally need Service Pack 2 installed
  3. SSO service in case of MOSS 2007 must be installed and configured properly. Check Configure SSO for Sharepoint Server blog to see how you can configure it
  4. In case of Sharepoint 2010, Forefront Identity Service (which is equivalent of SSO service in 2007), must be installed and configured
  5. SharePoint 2010 should be configured with following services up and running: 1. Profile Service 2. Search Service (Federated Search) 3. Timer Service
  6. Since VIDIZMO for Sharepoint interacts with instance of Sharepoint installed, it further needs ‘Windows SharePoint Services Administration’ service running on the server. Go to Administrative Tools > Services and make sure its running before you run setup
  7. You’ll need to run setup under a user that has administrative level access to Sharepoint configured and he must have local system administrator rights. He should be added in local system ‘Administrators’ group.
  8. And finally, you’ll need a Channel created at VIDIZMO before you begin installing. VIDIZMO for SharePoint utilizes your existing VIDIZMO Channel information and content. If you do not already have VIDIZMO Channel, you can sign up a FREE 30 Day trial by clicking here.
  9. Once your channel is set up, you need to add your SharePoint domain to trusted domains on channel.
  • Select “Update Channel” page from “Settings” drop down
  • Under “Federation” tab there is an text box field name “Trusted Domains”
  • Add your SharePoint site in trusted domain, as shown in snapshot below

Let the setup begin… Continue reading

Posted in VIDIZMO for SharePoint, VIDIZMO Overview | Tagged , , , , | Leave a comment