EchoVideo: Configuring Auth0 Authentication

You must be a top-level EchoVideo Admin to set up the Auth0 integration in EchoVideo.
You will also require the assistance of your IdP Administrator.

As part of our broader initiative to upgrade our identity platform, we will be transitioning from PingOne to Auth0 (by Okta). This change will enable improved integration for customers utilizing multiple Echo360 solutions and enhance the overall authentication experience, paving the way for a unified login experience.

Key items to note regarding the transition from PingOne:

1. Typically, Admins are the only ones using SSO, as Instructors and Students access via LTI.
   • When end users access EchoVideo via an LTI link / through an LMS, they do not use SSO.
   • SSO is only used when users go directly to one of the following region-specific links to log in:
     • echo360.org
     • echo360.ca
     • echo360.org.uk
     • echo360.net.au
2. Users are not logged out during this transition.
3. The transition process can be tested in your Sandbox prior to doing anything in Production.
4. You will be using the same IdP to connect to Auth0 as you were previously connecting to PingOne with.
5. The estimated time to complete the configuration is roughly 15 minutes.

Auth0 is a cloud-based identity management system that provides secure authentication and integrated single sign-on (SSO) for EchoVideo. To turn on Auth0 for your organization, follow the steps outlined below.

Note
During the transition, if Admins accidentally lock themselves out of EchoVideo, they can regain access using the Alternate login link from the region-specific pages above.
Before starting, ensure to copy your Institution ID, as it is required for the Alternate Login process.

Warning
This activity will immediately disable an existing PingOne SSO integration. Do not proceed until you have all the necessary information and expertise at your disposal. Also, consider saving the PingOne ID before proceeding.

Tip
When integrating with Microsoft Entra ID, IdP administrators may configure the system to use the userPrincipalName (UPN) as the unique identifier instead of an email address. To enable this, Entra can be set to pass the UPN in the echo_identity claim to EchoVideo.

To set up Auth0

1. Click the Settings icon in the upper-right corner of the screen.

2. From the Settings menu, select Institution Settings.

   General settings appear, and Basic Info is selected by default.

3. Click Integrations.
4. Select Auth0. 
   
5. Click Generate, as shown in the figure above.

6. Review the warning and click Yes.

   Warning
   Clicking Yes will immediately disable an existing PingOne SSO integration. Do not click Yes until you have all the necessary information and expertise available to proceed. Also, consider saving the PingOne ID prior to proceeding.

   The Identity Provider ID is populated.

7. Choose Click To Proceed, as shown in the figure below. 
   

   A new Auth0 browser tab opens.

8. Click Get Started, as shown in the figure below. 
   
9. Choose the identity provider you plan to integrate with EchoVideo to access step-by-step instructions for SSO configuration. 
   
10. Click Next, as shown in the figure above.
11. Follow the workflow for the identity provider you selected to complete the integration.

Guided Tour of the above steps: