How to manage SSO Groups

This feature requires an Enterprise plan.

You can pass group information to Vimeo via your Identity Provider using SAML or SCIM, allowing you to grant access to your content with specific departments or groups within your team. 

This article discusses how to pass this group information from your IdP and how to manage those groups on Vimeo.

In this article:

• What are SSO Groups?
• How to pass group information using SAML
• How to pass group information with SCIM
• If I use SSO to create groups, how can I manage them?
• How can I see which groups someone on my team is in?

What are SSO Groups?

Using groups from your Identity Provider (IdP; such as Okta, OneLogin, Google, etc.) allows you to restrict access to content, personalize content for particular departments, and grant the ability to manage content to certain individuals. Vimeo will identify your groups and keep your groups and group membership information up to date using your IdP, either with SAML metadata or with SCIM.

How to pass group information using SAML

To pass group membership information using SAML metadata, you need to add a custom SAML attribute named “groups” that contains a comma-separated list of groups a specific user is a member of; this image shows Okta settings, but this step applies to all Identity Providers (IdPs) using SAML. 

How to pass group information with SCIM

To pass group information with SCIM:

1. You first need to add your users within your IdP (using Entra ID (formerly Azure) or Okta).
2. Once you’ve added the users, you can create your desired groups, then provision the users and groups. 
3. After you’ve initiated provisioning, navigate to your team settings page.
4. Locate the Groups tab. You will see your groups have been added to your account. 

If I use SSO to create groups, how can I manage them?

While your SSO groups will be created and updated automatically via your IdP, you can get information about those groups within Vimeo. 

The Groups management page can be found by opening the account menu in the upper right corner and selecting Manage team or Manage organization. This is where you, as an owner, account admin, or organization admin (if your account is an organization with multiple workspaces), can see and do the following:

• List all the SSO groups and group members synced onto your account. You can access and search any groups (including custom groups) and group members by name.
• You can click on any of the groups and view all the members in that group.
• Clicking the arrow next to ‘Name’ will sort the group names alphabetically.

How can I see which groups someone on my team is in?

You can access the Manage Groups option for each member from the options (•••) icon on the team management page to view all the group memberships of that individual.