[ARCHIVED] Missing Permissions for Panopto Integration

[elarin]

Good morning,

When we initially integrated Panopto with Canvas, we assigned the new user we created as an Account Admin account role to our instance. After testing, we created a separate account role and assigned it the permissions listed on this page - Panopto Support. Our end users complained that they could not log in to Panopto using SSO.

Panopto support looked into it and said the role we created also requires the following permissions:

Users - manage login details
Users - view login IDs

These permissions are missing on their support document. Just wanted to share this information with anyone else looking to integrate Panopto with Canvas.

Erick

[anna_lamb]

Hello Erick,

I found this post today as I started looking into Panopto integration because one of our colleges wants to pilot Panopto.   So far we haven't allow any developers key integration in our instance because we don't have much knowledge of it.  And the vendor is asking for lots of permissions.  I'm wondering if you could share your integration process with me?

Can you give me some tips? 

Anna

[elarin]

Hello Anna. Most of our LTI integrations are simple in that we just have to provide a consumer key and secret and URL to point to the vendor's cloud platform. 

But with Panopto, they need more interaction with courses at the top account level or maybe sub-accounts. For example, you can provision courses from Canvas to Panopto which gets resources ready on the Panopto side as far as course information or course enrollments. So for this to happen, a developer key is needed for them to get the information they need. There's no way around this. Here are the permissions we have granted for the Panopto account role we created:

Let me know if you have any more questions.

Erick

[anna_lamb]

Thanks for quick response.  I have a few questions.

I saw Panopto is listed in Inherited Developer Keys which is in 'off' state.  Is this the where we can activate it?

Did you use scoping to control the endpoints as well?  Also did you create a separate admin account for this integration use only?

[erios]

I recommend that you, your campus IT (helping with the integration) and your Panopto rep connect and make a task list for the different Canvas/Panopto integrations. If you have a project manager, that would be great to include was well. There are many pieces to getting Panopto integration up and running. Our campus’ task list was long as we migrated from MediaCore. A Panopto engineer guided us and worked with us through the migration and integration process.

Don’t hesitate to allow permissions to for the LTI. You’ll need a separate admin account. In the case of our campus, we have several account admins (IT, Media Services, and instructional design staff). There will be Panopto maintenance at different levels and times requiring different university stakeholders to access admin account. Unfortunately, Panopto only has one “admin” account level (no super admin account). Hope this helps.

[anna_lamb]

Elba,

Thanks for your information, that is very helpful.

[elarin]

I don't know if you can activate it from there. I used the "+ Developer Key" button because at the time we added it a year ago, there was no "Inherited" link in Canvas.

No, Enforce Scopies it not enabled for Panopto for us.

Yes, we created a separate admin account for Panopto.

Erick

[anna_lamb]

Erick,

Thanks again for answer my questions, very helpful.