Single sign-on for live streaming and on-demand video

Okta, OneLogin, Google Workspace, Active Directory or any SAML 2.0 provider, for live streams and on-demand video alike. Viewers sign in with the credentials they already have, and SSO protects the video itself as well as the page it plays on.

Trusted by the world's most demanding enterprises

VICE logo
Meta logo
Shopify logo
Ericsson logo
Blizzard logo
Activision logo
Seven Network logo
Groupon logo
Facebook logo
WhatsApp logo

How single sign-on protects live and on-demand video

With single sign-on, the people who can watch a live stream or a recording are exactly the people your identity provider says can. StreamShark applies that check to the video itself as well as the page it plays on, so access follows your directory wherever a link ends up.

StreamShark is an enterprise video platform that enforces single sign-on across live streams, on-demand video hosting and channels, at every layer from the portal your team works in and the player your viewers watch down to the manifest and each segment of the stream. It connects to Okta, OneLogin, Google Workspace, Active Directory and any identity provider supporting SAML 2.0, and your SSO groups decide who sees what. A board briefing and a company-wide town hall can run on the same platform with entirely different audiences.

Single sign-on is available on Enterprise plans. For audiences outside your directory, such as partners and customers, viewer management controls access by email address and domain, and it's included from the Team plan upward on the pricing page. SSO is one part of StreamShark's wider enterprise video security.

Portal access that follows your access groups

The same directory that controls who can watch also controls who can work in the StreamShark portal. Access is restricted by your users' access groups, which keeps a large production team, or several departments, working only where they should.

Access control lists restricting the StreamShark portal by user group

SSO enforced down to every video segment

Viewing rights follow your organization's own access policies, so only people with the right clearance in your directory can watch a given stream. SSO protects the stream itself as well as the player, down to each individual video segment, so a copied link on its own is not enough to watch. All user and viewer access is logged in detail for security audits.

An authorized viewer allowed and an unauthorized viewer blocked from a stream

Works with any SAML 2.0 identity provider

StreamShark works with any identity provider that supports SAML 2.0, including Okta, OneLogin, Google Workspace and Active Directory. Viewers sign in with the credentials they already use, and access is managed in your own directory.

Identity provider servers connected to StreamShark over SAML 2.0

A per-viewer report of every SSO sign-in

All SSO viewer access to events and on-demand videos is logged in the SSO report. Search it in the portal by SSO ID, or export it as a CSV with each viewer's SSO ID, device information, and start and end times, ready to share with your security or engagement teams. It also shows which viewers came back for more than one session, and sits alongside the other reports in StreamShark's video analytics and insights.

A report file of individual viewers, each secured by single sign-on

Viewer watermarking on the player

For confidential broadcasts, each viewer's SSO identity can be watermarked onto the video player, so any screen recording shows who was watching. Placement and contents of the watermark are set in the StreamShark portal.

A live video player watermarked with the viewer's email address and name

Setting up SSO for your organization? We'll work through it with your IT team.

Book a Demo

See how single sign-on works with your directory

Book a walkthrough of the SAML setup and how your SSO groups map to streams and channels.

Please enter your first name.
Please enter your last name.
Please enter a valid email address.
Please enter your company name.
Please enter your country or region.
Please tell us how we can help.
Thank you!
We've received your request. A member of our team will be in touch shortly.

Single sign-on questions we get asked

StreamShark works with any identity provider that supports SAML 2.0, including Okta, OneLogin, Google Workspace and Active Directory. Viewers sign in with the same credentials they use for everything else at work.

The stream itself. StreamShark enforces single sign-on on the portal, the video player, the manifest and each individual video segment of a live stream or on-demand video, so a copied link on its own is not enough to watch. Every user and viewer access is logged in detail for security audits.

Yes. The same single sign-on protects recordings and on-demand videos, not only live events, and it extends to channels. You can protect the viewer home page and every channel with SSO, and restrict each channel to particular SSO user groups.

Yes. Your SSO user groups map to viewing restrictions per stream and per channel, so a leadership briefing and an all-hands can have different audiences on the same platform. Access to the StreamShark portal can be restricted by access group in the same way.

Yes. All SSO viewer access to events and on-demand videos is logged in the SSO report. You can search it in the portal by SSO ID or export it as a CSV, which includes the SSO ID, device information, and start and end times for each viewer.

No. Single sign-on requires an Enterprise plan and is not included in the Standard, Team or Business plans. For audiences outside your directory, viewer management is included from the Team plan upward.