Collaboration (Organizations)

• Private: Access to properties created within a private space is restricted to your user account. You should only use this space for properties that do not require collaboration.
  If you have not created an organization yet, then the Edgio Console will only display your private space.
• Organization: Edgio allows you to collaborate with other team members through an organization. An organization provides a hub for all property-related tasks, such as managing a property’s configuration, deploying code, and reviewing analytics.

Managing Organizations #

• Creating an organization.
• Managing membership.
• Setting up security for your web applications and API.

1. From the Edgio Console, click on the

   

   icon next to your name and then click on Create an Organization.

   

2. In the Organization Name option, assign a name to your organization (e.g., my-company) and then click Create an Organization.

   

   As shown above, the URL for your organization’s Web Properties page is formed by appending your organization’s name to the Edgio Console’s base URL. Additionally, an organization’s edge link starts with the organization’s name (e.g., https://my-company-nature-videos-production.edgio.link/).

Managing Organization Members #

1. Load the desired organization’s Members page.
   1. From the Edgio Console, select the desired organization.
   2. From the left-hand pane, click Members.
2. Click Add Member.
3. From the User Email option, type the user’s email address.
4. From within the ORGANIZATION section, select the role that will be assigned to the user.
   By default, the organization’s properties and environments will inherit the role assigned to the user at the organization level.
5. Customize a user’s access to a property by assigning a different role for the desired property.
   1. Below the ORGANIZATION section, find and expand the desired property.
      Filter your properties by typing the desired name within the Search Properties option.
   2. Select the desired role.
   3. Repeat these steps as needed.
6. Customize a user’s access to an environment by assigning a different role for the desired environment.
   1. Expand the desired property. All of the property’s environments are listed directly below the list of available roles.
   2. Find the desired environment and select the desired role.
   3. Repeat these steps as needed.
7. Click Invite to send a welcome email.
   A new user must confirm their account by performing the following steps:
   1. Click CONFIRM MY ACCOUNT from the welcome email.
   2. Click Accept to accept our terms of service and privacy policy.
   3. Set their password or link their account to Github, Google, or Microsoft.
   Existing Edgio users do not need to confirm their account and will not receive a welcome email.

1. Load the desired organization’s Members page.
   1. From the Edgio Console, select the desired organization.
   2. From the left-hand pane, click Members.
2. Find the user and click its

   

   icon.
3. Optional. Assign a different role at the organization level.
4. Optional. Customize a user’s access to a property by assigning a different role for the desired property.
5. Optional. Customize a user’s access to an environment by assigning a different role for the desired environment.
6. Click Save.

1. Load the desired organization’s Members page.
   1. From the Edgio Console, select the desired organization.
   2. From the left-hand pane, click Members.
2. Click the

   

   icon next to the member that will be removed.
3. When prompted, click Delete to confirm that the user will be removed from the organization.

Single Sign-On (SSO) #

• Edgio-Initiated Workflow: This common SSO workflow requires users to browse to the Edgio Console. After which, Edgio will authenticate the user’s identity with your identity provider. A high-level overview of this workflow is illustrated below.

  

• Identity Provider-Initiated Workflow: This SSO workflow requires users to load the Edgio Console through your identity provider. A high-level overview of this workflow is illustrated below.

  

Getting Started #

1. Contact your account manager or our sales department at 1 (866) 200 - 5463 to get started. Be prepared to provide the following information:
   • SAML Request Signing Certificate: An X.509 certificate in PEM format. Edgio uses this certificate to sign the SAML request sent to your identity provider.
   • Login URL: Edgio redirects users to this URL to perform an authentication challenge.
   • Logout URL: Edgio requests a single or global logout through this URL.
   • RelayState: Edgio redirects users to this URL upon authentication. This URL should be:
     https://api.edgio.app/initiate-sso
   • SAML 2.0 metadata in XML format.
2. Add the desired users to the Edgio Console. Make sure that the email addresses defined within the Edgio Console match those defined within your identity provider.
3. From within your identity provider, use the following information to configure Edgio as a service provider:
   • Entity ID: https://id.edgio.app
   • Assertion URL: https://id.edgio.app/saml/assert
   • Login URL: https://id.edgio.app/saml/login
   • Logout URL: https://id.edgio.app/saml/logout
   • Digest: sha256 | sha512
   • Signature: sha256 | sha512
   • Sign Request: TRUE | FALSE
   • Sign Response: TRUE | FALSE
   • Encrypt Assertion: TRUE | FALSE
4. Set up a SAML assertion subject for each email address that should have SSO access to the Edgio Console.
   Set the Subject NameID value to the email address format. The vendor-specific attibute for the email address claim is typically either email or emailaddress. Choose the correct attribute for the NameID format.
5. Optional. Set up custom attribute statements for the user’s name. Use the following schema namespaces:
   User’s First Name:
   http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
   User’s Last Name:
   http://schemas.xmlsoap.org/ws/2005/05/identity/claims/familyName

SAML Request Signing Certificate Renewal #