Active directory (AD) integration

AD integration is an optional Volicon Media Intelligence service module. A Volicon Media Intelligence service support engineer will need to be involved to configure the server.

Prerequisites

The following prerequisites need to be met for the AD integration to proceed:

  • The support engineer needs to know the IP address or the fully qualified domain name (FQDN) of the AD server. The FQDN is more flexible and is preferred.

  • Add the Volicon Media Intelligence service web server to the AD domain.

  • Create a simple domain user with a non-expiring password and notify support.

  • Provide the support engineer with your organizational units (OUs) and their basic structure.

  • Upgrade all the Volicon Media Intelligence service servers to the latest qualified build prior to integration.

  • Configure all your client browsers to have the web server address in their intranet zone or IE trusted zone.

AD operation

  • After all prerequisites are met, you must define several groups in the Volicon Media Intelligence service. To do so, you can access the system with a non-AD password through the URL http://<server>/admin. When using AD integration, the user’s set of permissions (including accessible channels and maximum number of concurrent channels played) is defined on the Volicon Media Intelligence service groups (user management section).

  • You must also create identical group names as defined in Volicon Media Intelligence service in the AD. Once completed, the administration of users’ access to Volicon Media Intelligence service and their privileges will only be administered through the AD by adding or removing users as members of the different groups. Note: One exception is the number of concurrent channels. By default, there is no limit; if defined, the Volicon Media Intelligence service settings will be used. Furthermore, if multiple groups define the number of concurrent channels, the highest number will be used (even if it is set to unlimited).

  • Initially, the user accesses the Volicon Media Intelligence service system through a browser with only an IP address or a domain name. Access to the Volicon Media Intelligence service system is provided automatically according to the user’s assigned group(s) in AD by matching the user by group name to the defined Volicon Media Intelligence service groups. If the user is a member of several groups, their effective permissions will be the sum of all permissions of those groups.

  • The user’s name is automatically created internally within the Volicon Media Intelligence service upon first login. It is then associated with the user-generated content in the Volicon Media Intelligence service (e.g., clips, programs, etc.).