Edgio

Collaboration (Organizations)

You may create properties within a private space or an organization.
  • Private: Access to properties created within a private space is restricted to your user account. You should only use this space for properties that do not require collaboration.
    If you have not created an organization yet, then the Edgio Console will only display your private space.
  • Organization: Edgio allows you to collaborate with other team members through an organization. An organization provides a hub for all property-related tasks, such as managing a property’s configuration, deploying code, and reviewing analytics.
A breakdown of organization and private spaces is illustrated below.
Types of Spaces

Managing Organizations

Organization management consists of:
To create an organization
  1. From the Edgio Console, click on the
    Menu
    icon next to your name and then click on Create an Organization.
    Space menu
  2. In the Organization Name option, assign a name to your organization (e.g., my-company) and then click Create an Organization.
    Add an Organization
    As shown above, the URL for your organization’s Overview page is formed by appending your organization’s name to the Edgio Console’s base URL. Additionally, an organization’s edge link starts with the organization’s name (e.g., https://my-company-nature-videos-production.edgio.link/).

Managing Organization Members

Upon creating a user, you must assign a role that will be applied at the organization level. By default, this role is applied across all of the organization’s properties and environments. However, you may customize a member’s access by granting one of the following roles to a specific property or environment: Viewer, Purger, Editor, or Maintainer.
RoleDescription
ViewerThis role grants read-only access.

If applied at the organization level, then the user will have read-only access to the organization’s settings, properties, and environments.
PurgerThis role grants the Viewer role along with the ability to purge content.

If applied at the organization level, then the user may purge content for any of the organization’s properties.
Security ManagerThis role grants the Viewer role along with the ability to manage all security settings.
EditorThis role grants the capability to configure properties and to configure, deploy, and purge environments. However, this role does not grant the ability to configure, deploy, or purge an environment that has been restricted to the Maintainer role.
MaintainerThis role grants the Editor role along with the ability to create and delete properties and environments.
AdminThis role grants full access to the entire organization including the ability to manage members.
To add members
  1. Load the desired organization’s Members page.
    1. From the Edgio Console, select the desired organization.
    2. From the left-hand pane, click Members.
  2. Click Add Member.
  3. From the User Email option, type the user’s email address.
  4. From within the ORGANIZATION section, select the role that will be assigned to the user.
    By default, the organization’s properties and environments will inherit the role assigned to the user at the organization level.
  5. Customize a user’s access to a property by assigning a different role for the desired property.
    1. Below the ORGANIZATION section, find and expand the desired property.
      Filter your properties by typing the desired name within the Search Properties option.
    2. Select the desired role.
    3. Repeat these steps as needed.
  6. Customize a user’s access to an environment by assigning a different role for the desired environment.
    1. Expand the desired property. All of the property’s environments are listed directly below the list of available roles.
    2. Find the desired environment and select the desired role.
    3. Repeat these steps as needed.
  7. Click Invite to send a welcome email.
    A new user must confirm their account by performing the following steps:
    1. Clicking CONFIRM MY ACCOUNT from the welcome email.
    2. Clicking Accept to accept our terms of service and privacy policy.
    3. Set their password or link their account to Github or Google.
    Existing Edgio users do not need to confirm their account and will not receive a welcome email.
To change a user’s role
  1. Load the desired organization’s Members page.
    1. From the Edgio Console, select the desired organization.
    2. From the left-hand pane, click Members.
  2. Find the user and click its
    Edit
    icon.
  3. Optional. Assign a different role at the organization level.
  4. Optional. Customize a user’s access to a property by assigning a different role for the desired property.
  5. Optional. Customize a user’s access to an environment by assigning a different role for the desired environment.
  6. Click Save.
To remove a member
  1. Load the desired organization’s Members page.
    1. From the Edgio Console, select the desired organization.
    2. From the left-hand pane, click Members.
  2. Click the
    Delete
    icon next to the member that will be removed.
  3. When prompted, click Delete to confirm that the user will be removed from the organization.

Single Sign-On (SSO)

Edgio offers single sign-on (SSO) integration for SAML 2.0 identity providers. This type of integration allows Edgio to delegate authentication to your identity provider. We support the following workflows:
  • Edgio-Initiated Workflow: This common SSO workflow requires users to browse to the Edgio Console. After which, Edgio will authenticate the user’s identity with your identity provider. A high-level overview of this workflow is illustrated below.
    High-level Edgio-initiated SSO workflow
  • Identity Provider-Initiated Workflow: This SSO workflow requires users to load the Edgio Console through your identity provider. A high-level overview of this workflow is illustrated below.
    High-level IdP-initiated SSO workflow

Getting Started

Establishing a SSO workflow requires a custom integration between our identity service and your identity provider.
To request SSO integration with a SAML 2.0 identity provider
  1. Contact your account manager or our sales department at 1 (866) 200 - 5463 to get started. Be prepared to provide the following information:
    • SAML Request Signing Certificate: An X.509 certificate in PEM format. Edgio uses this certificate to sign the SAML request sent to your identity provider.
    • Login URL: Edgio redirects users to this URL to perform an authentication challenge.
    • Logout URL: Edgio requests a single or global logout through this URL.
    • RelayState: Edgio redirects users to this URL upon authentication. This URL should be:
      https://api.edgio.app/sso-redirect
    • SAML 2.0 metadata in XML format.
  2. Add the desired users to the Edgio Console. Make sure that the email addresses defined within the Edgio Console match those defined within your identity provider.
  3. From within your identity provider, use the following information to configure Edgio as a service provider:
    • Entity ID: https://id.vdms.io
    • Assertion URL: https://id.vdms.io/saml/assert
    • Login URL: https://id.vdms.io/saml/login
    • Logout URL: https://id.vdms.io/saml/logout
    • Digest: sha256 | sha512
    • Signature: sha256 | sha512
    • Sign Request: TRUE | FALSE
    • Sign Response: TRUE | FALSE
    • Encrypt Assertion: TRUE | FALSE
  4. Set up an additional SAML token claim to provide email addresses to Edgio. Use the following schema namespace:
    http://schemas.xmlsoap.org/ws/2005/05/identity/claims/email
  5. Optional. Set up custom attribute statements for the user’s name. Use the following schema namespaces:
    User’s First Name:
    http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
    User’s Last Name:
    http://schemas.xmlsoap.org/ws/2005/05/identity/claims/familyName

SAML Request Signing Certificate Renewal

Maintain SSO operability by renewing your SAML request signing certificate prior to expiration. Certificate renewal requires providing a new SAML request signing certificate in PEM format to either your account manager or technical customer support.