API user based app with SSO

Bill Durrant

I am trying to setup a user based server app, issue I am seeing is we have SSO setup on our Panopto account and need to know how will Panopto be able to authenticate the user creds without the IDP?

Adis Hrnjica

Hi Bill,

For the Panopto Public API on an SSO site, you don’t log in with your IdP username and password. Each request uses a user key plus either a Panopto password (internal users only) or an auth code (SSO/external users).

For SSO users, the auth code is computed from their Panopto user key (Provider\username) and your Id Provider’s Application Key in Panopto. Your integration must already know the user is valid so Panopto won’t contact the IdP on each API call.

If users can sign in through a browser, OAuth (authorization code + refresh token) is usually simpler than building auth codes for every user.

I hope this helps.

Thanks,

-Adis

Bill Durrant

Hi Adis, I am not sure where this auth code is located in Panopto, nothing is provided when we create the API client, tried looking in the IDP settings, any help would be appreciated.

Adis Hrnjica

Hi Bill,

The auth code is not stored in Panopto and is not part of the API/OAuth client you create. The OAuth client only gives you the client ID and client secret for your application.

For SSO users, the auth code is something your application calculates each time, using:

1. Application Key - on the Identity Provider in Panopto admin (System → Identity Providers), open your SSO provider and look for Application Key (not on the OAuth client page). You may need to edit the provider to see it; some types can generate a new key with a button there.
2. User key - the Panopto username format ProviderName\username (same provider name as in IdP settings).

For the Public API, the auth code is a hash of:
{userKey}@{your-panopto-host}|{applicationKey} (SHA-1, values lowercased).
Panopto does not show this value in the UI—you build it in your code after you’ve already verified the user on your side.

Thanks,

Adis