You are here

Single Sign-On (SSO) Implementation for HKU Video Streaming Service

Introduction

The Single Sign-On (SSO) Implementation of the HKU video streaming service allows you to apply access control to your videos. It is assumed that your videos are stored in the HKU video server and that they support RTMP streaming. Departments can upload files to the video server through a video streaming account created by ITS. To apply for this account, please fill in CF43.

Publicly Accessible Videos With No Access Control (Public Videos)
These videos can be accessed by anyone on the Internet. They can be played by Internet browser (or compatibles). Details about how to upload the video files and render the webpage can be found in the following link:
http://www.its.hku.hk/documentation/guide/communication/streaming/mp4

SSO Controlled Videos (SSO Videos)
These videos are restricted to users with HKU Portal accounts. There are two levels of access control: one is that the videos can be accessed by all HKU Portal users; the other is that the videos are limited to selected group of HKU Portal users. Details on how to configure access control will be given in a later section.

There are some basic requirements for playing SSO videos:

  1. The web browser must support HTML5 progressive streaming, following are some tested browser versions:
    Win 7/10 Mac OS X 10.5 Leopard IPhone Android
    Google Chrome
    65.0.3322.3
    Safari 5.0.6
    (July 20, 2011)
    Google Chrome
    64.0.32.82.112
    Google Chrome
    63.0.3239.111
    Mozilla Firefox
    57.0.4
      Mozilla Firefox 10.4
    (8288)
    Mozilla Firefox 58.0
    Microsoft Edge
    38.14393.1066.0
      Apple Safari iOS 11.X  

    *Internet Explorer does not support progressive streaming, video will download instead.

  2. The user must have a valid HKU Portal account.

To create a SSO controlled video, there are several steps

  1. Upload videos to the HKU video server (VSS)
  2. Applying access control configuration
  3. Registering URLs for SSO access

Uploading SSO videos to the HKU Video Server
The uploading procedure of SSO videos is similar to that of public videos. Public videos are placed in a pre-defined directory called ‘vod’ but SSO videos can be placed in other user-created directories.

(a) Install the CoreFTP program on your PC.

(b) Run the program: Start > All Programs > CoreFTP > CoreFTP Lite

(c) Input the followings:
Site Name: vss
Host / IP /URL: vss.hku.hk
Username: <your account>
Password: <your password>
Connection: SSH/SFTP

(d) Click “Connect”----Click “Connect”

(e) SFTP your videos’ to /home/<yourDept>/<sso>
where:
<yourDept> stands for the directory name assigned to your department on the HKU Video Server.
<SSO> stands for the directory name where SSO videos are placed (there can be more than one such directory).

Applying Access Control Configuration

By default, the SSO videos uploaded to the HKU Video Server are limited to HKU Portal users’ access only. One may, however, further limit access to a selected group of HKU users. This can be done by including the eligible users’ staff number or student number in a pre-defined text file 'act.txt'. For instance, you would like 10 users to watch a video call 'myaclvideo.mp4'. On the HKU video server and under your departmental directory’s sso folder, you should create a sub-folder and place ‘myaclvideo.mp4’ and the file ‘acl.txt’ under it. It involves two steps:

1. Edit your ‘acl.txt’, which is simply a text file listing the eligible users’ Staff ID or Student number. A sample of 'acl.txt' as below:

StudentNumber
Staff Number1
Staff Number2
StudentNumber3

.....
StudentNumber8
Staff Number9
Staff Number10
 

2. Upload the restricted videos and ‘acl.txt’ to the HKU Video Server

(a) Install the CoreFTP program on your PC.

(b) Run the program: Start > All Programs > CoreFTP > CoreFTP Lite

(c) Input the followings:
Site Name: vss
Host / IP /URL: vss.hku.hk
Username: <your account>
Password: <your password>
Connection: SSH/SFTP

(d) Click “Connect”

(e) SFTP your videos and ‘acl.txt’ to /home/<yourDept>/<SSO>/<acl1>
where:
<yourDept> stands for the directory name assigned to your department on the HKU Video Server.
<acl1> stands for the directory where restricted videos and acl.txt are placed.   

Registering URLs for SSO Access
Finally, the URLs of the SSO videos have to be registered with us before they can be effective. To register the URLs of the videos enabled with SSO, please fill in CF109. The registration is available to departments/offices of HKU only.

Last Updated: 25 April 2018