Best Of
Re: Multifactor Authentication
I know that this has been marked as "Will not pursue" but our institution is mandating that all privileged accounts with elevated access to the enterprise must have MFA on them.
Our two options are to either work with vendors to get MFA in front of local accounts, or we will need to delete those local accounts.
I know this is a requirement (or at least a preference) for other customers, so I'd like to see Panopto reopen this topic if possible.
Re: Multifactor Authentication
MFA/2FA now, not 3 years from now. Do it NOW!
There's no reason this should not be implemented. We've had 2FA on our Bb Learn since 2016.
Re: Understanding SOAP API documentation
Hi @Kevin Baum, thanks for the explanation and the resources, I successfully imported the wsdl files in SoupUI which is helpful. But I do have a few follow up questions on this.
Is it correct that all the main wsdl resources are the following or are there more?
- AccessManagement.svc?wsdl
- UserManagement.svc?wsdl
- SessionManagement.svc?wsdl
- RemoteRecorderManagement.svc?wsdl
- UsageReporting.svc?wsdl
If there are more, could you list them all?
Additionally I am trying to make sense of the Panopto API Documentation on this page: https://support.panopto.com/resource/APIDocumentation/Help/html/c40c21c6-dc7a-d822-8c99-b276ee8337c2.htm I recognize some properties from the responses of requests, but what is the purpose of the constructors and methods? And how do they relate to writing code to execute API requests?
What I'm missing is documentation of the SOAP requests to be able to know what kind of values are allowed / expected. The following XML as an example of the GetFoldersList request (retrieved from SoapUI) shows that almost all elements are optional, but if a critical one is missing I get an 500 Internal Server Error, without any indication which was missing, the error message only states "An error occurred deserializing the message. See server logs for details" and I don't have access to server logs:
In my experiments I left every ?????? empty, I put them in this screenshot to indicate where I have no clue what I should put there or if they could be left empty. In this case I have no idea what value would be needed as ParentFolderId for the root folder just to go from there, as there is no GetRootFolderId endpoint as far as I know.
This is just one example, but I will need many more different requests for our projects. Can you please provide documentation that specifies the required details to make requests successfully?
Thanks,
Jaap
Re: Multifactor Authentication
Panopto’s inability or unwillingness to offer this option is difficult to justify. Multi-factor authentication is a basic security control at this point and relatively straightforward to implement.
I understand that implementing and supporting MFA can introduce additional operational and support costs. If that is the concern, one option would be to limit it to a small number of accounts per institution, for example five accounts, to keep the support burden manageable.
The accounts we are asking to secure are administrative accounts, which makes this even more important. These accounts have elevated privileges and represent a much higher risk if compromised, so they should have stronger protections than standard user accounts.
I have to assume the internal accounts Panopto staff use for administrative and support access require MFA.
Re: Thumbnail progress bar
Yeah, I'm honestly not sure why this was changed in the way it was. If this bar was something where we could set it to be a brighter brand aligned color, I could see it being OK potentially, but the way it exists right now just fit the need.
The reason the YouTube solution works is because it's a bright red bar. If we were able to set a similarly bright color that aligns with our individual brand guidelines, this could be an OK solution.
In my opinion there are two options moving forward, and one should be done ASAP:
- Give us a branding control to set the color of the bar (my recommendation)
- Change the element back to the previous state until a more effective solution can be implemented
Thumbnail progress bar
The recent change to the thumbnail progress bar makes it very hard to see some times. We have already got complaints from students saying it is hard to tell what they have watched and not.
This is a picture a student took to show the issue. One of them has been watched, the other not.
Could you somehow make the contrast better? Obviously it was easier to see the bar before this 'Product improvement' as you call it in the Service update description:
Thanks,
// Vegard
Re: Bulk Scheduling Changes Feature Request (Remote Recorders)
4 years later and here I am checking on this subject.
Once events are scheduled for recording, if a faculty wants a change, it is a laborious process to manually go in and edit scheduled recorded events. Often times, it is easier to delete them and re-schedule them again with the changes.
One thing that can't be fixed with the above method is changing the owner of the videos. As I am scheduling them, it defaults to me. However, if a video is restricted by a faculty member, when a student wants to view a video, the access request comes to me as the owner. I've been spending my morning editing existing events and changing that over to the faculty for each course. There has to be a better way to do this - it would be great to set the owner when I schedule the actual events, but in the very least, it would be great to bulk edit the existing scheduled recordings.
Will this ever be a priority?
Re: Make the "[course name]::Creator" group on course folders non-removable by teaching staff
I would agree that LMS integrations where permissions are inherited from the LMS, allowing staff to basically remove their own access is something that we would like to turn off as default.
Re: Make the "[course name]::Creator" group on course folders non-removable by teaching staff
I don't get why this hasn't been fixed yet.
Why on earth would Panopto allow users to continue harming themselves (and other creators) in this way?
It would be great to see an acknowledgement from Panopto that this isn't a good user experience and they plan on resolving it at some point.
Re: Ability to permanently swap primary and secondary video areas
I would like to add my name to this request: Or at the very least, when there are two streams, the ability to delete what the platform has (sometimes arbitrarily) decided is the primary stream such that the alternate stream can simply be promoted.
As it stands, it's just a silly, pointless inconvenience that needs to be navigated for no good reason.
