Setup Guides
Comment on page

KAF\KMS Integration


This module adds Annoto in-video collaboration and insights solution to Media Space.

Account Administrators Guide

To configure the module, a MediaSpace administrator should login to the MediaSpace admin page (<MediaSpace site Url>/admin) and navigate to the Annoto module.
Note : If this module is not in your MediaSpace application, please contact your Kaltura representative to enquire about adding it.

General Settings

  • enabled - Enable/Disable the Annoto module.
  • apiKey - Which was received from Annoto, this is provided per Partner ID.
  • ssoSecret – Single Sign-On secret matching the API Key provided by Annoto.
  • privateDiscussions - Enables discussions to be private in the scope of Course/Category/Channel. If disabled, discussions on same video entries will be public across Courses/Categories/Channels.

Activation Settings

  • activatedByDefault - If enabled, by default Annoto is active on all the Videos for all Courses/Categories/Channels. (DEPRECATED Option)
  • activationEditAllowed - If enabled, Authorized Users will be able to activate/deactivate Annoto for specific Courses/Categories/Channels/Videos.

Annoto Activate/Deactivate Permissions

activationEditAllowedRoles - Allows to select which roles/users/groups can activate/deactivate Annoto in Courses/Categories/Channels/Videos.
The dropdown has the following options:
  • Specific Users
  • privateOnlyRole
  • adminRole
  • unmoderatedAdminRole
If a role is selected, any role above it will also be able to activate/deactivate Annoto.
Regardless of the role settings below, only users that have access to Kaltura Entry/Channel/Category settings are Authorized to activate/deactivate Annoto.
ACTIVATE/DEACTIVATE Permissions Based on Users/Groups
To Authorize only specific users or groups to activate/deactivate Annoto, choose “Specific Users” in the activationEditAllowedRoles dropdown, as you can see in this video or follow the following steps:
  • Once “Specific Users” is chosen, a submenu will be available for adding authorized users and/or groups.
  • Click on “activationEditAllowedUsers” to add Users/Groups
  • Click on the “Select Users/Groups” to add Users/Groups to the list
  • Enter the user or group (once you start typing you will see suggestions related to what you entered)
For example, in the below image we can see [email protected] is currently the only one that can activate/deactivate Annoto. All other users will not have the option of Activate/Deactivate Annoto in Courses/Categories/Channels/Videos.
As a best practice, We suggest creating a Kaltura Users Group named for example “annoto_admins” and adding only this group to activationEditAllowedUsers list.
For more information on Groups visit : Kaltura Groups

Additional Activation settings

  • disableUserAnalytics - If checked, User detailed analytics will be disabled and not shown in the Annoto dashboard.
  • guestUsersAllowed - If checked, not-logged-in Users will be able to see Annoto Widget. [KMS only]
  • loginPath - URL path for user login page. If provided, Users will have login prompts in the widget to add a comment/vote/etc.

Player Embed Sizes

  • playerEmbedSizesOverride - Enables overriding the BSE player sizes (for the optimal Annoto user experience).
  • playerEmbedSizes - Defines sizes that can be used for embedded players. Defines the player size in the following format: {width}x{height}.
  • Recommended sizes:
    • Large: 1200*628
    • Medium: 1024*576
    • Small: 900*506

Plugin Settings

  • enablePlayerPlugin - Enables the built-in Player Plugin. If disabled, annoto plugin would not be injected into the Kaltura player by the module. Allows using Kaltura player with custom (non-production) Annoto plugin.
  • deployment - Annoto Deployment Region.
  • playerPluginCDN - CDN host of the Annoto plugin assets (read-only).
  • analyticsCDN - CDN host of the Annoto analytics assets (read-only).


Integration Configuration
  • appTokenId - ID of the App Token.
  • appToken - Value of the App token.
  • appTokenHash - Hash type used to generate the App token.
  • uiConfigId - Player UI config ID to be used by Annoto.
Once Annoto is enabled, when we will view the media, this is what we will see :

Additional Kaltura Products Support

Annoto provides its in-video collaboration solution for Live video and VOD across the different Kaltura products.


Annoto supports Kaltura MediaSpace.

KAF Module (LMS Integration)

Annoto supports KAF Module integration; all the settings that are available for KMS are also supported for the KAF Integration.

Kaltura Webcasting

Annoto supports Kaltura webcasting and provides a unique capability of continuing the user discussions and personal notes, that were made during live video streams, on VOD, keeping each comment in sync with the video, While providing analytics and insights on the user's activities during the live session and afterward in the VOD.
Now Kaltura Webcasting users can collaborate and take notes during live streaming and then continue on the recorded content, and all the analytics will be available through the Annoto dashboard (Also integrated as part of Kaltura).
Kaltura Webcast has added support to “Live to VOD.” This is a unique capability enabling all users' interactions (comments, notes, votes, etc.) created during the Live session to be available on the recorded session as well.

Kaltura Lecture Capture

All Annoto features and capabilities are also available for Kaltura Lecture Capture live stream enabling all users to interact (comments, notes, votes, etc.) during the live broadcast, and gain insights on the live sessions.

KMC Player Plugin

Annoto can be added as a player plugin in KMC. This enable customer to embed Annoto in external sites (SharePoint, intranet etc.)


The Annoto and Kaltura users, Single Sign-on integration, doesn’t work in content that was embedded outside of KMS.


After enabling the Module and entering the apiKey and the ssoSecret and enabling Annoto on the media, Annoto is still not showing
Need to verify that the client doesn't have an alias domain, instead of the traditional domain,
As the apiKey and ssoSecret that Annoto provides are generated based on the domain
Verify that the apiKey and ssoSecret are not switched by mistake

Appendix A : Kaltura and Annoto Data Transfer

To provide the best customer and user experience, some of the data is transferred between Kaltura and Annoto platforms.

Processed Data

Kaltura shares data about the media details (media items and their context) and information about the users that consume the media.
Annoto collects all the UGC (User Generated Content) such as comments, votes, private notes, etc. and securely stored on AWS cloud (SAAS solution) or dedicated enterprise cloud (Enterprise solution).

Media Details Data

Kaltura shares the following media details to Annoto:
  1. 1.
    Media identifier
  2. 2.
    Media title
  3. 3.
    Media description
  4. 4.
    Media duration
  5. 5.
    Media author
  6. 6.
    Media thumbnail URL
  7. 7.
    Context (channel/category/course) identifier
  8. 8.
    Context title
  9. 9.
    Context description
  10. 10.
    Context thumbnail URL

Users Data

Kaltura shares the following user information to Annoto via SSO (Single Sign-On):
  1. 1.
    User identifier
  2. 2.
    User full name
  3. 3.
    User email
  4. 4.
    User role

Data Transfer Methods

All the data is securely transferred over https.


If you need any additional information or have any questions or want to know how you can add Annoto to your videos, please contact us at [email protected]
If you want to lean more about Kaltura, click here.

Last but not least

To learn how to add the Annoto Dashboard in your KAF\KMS, go to How to access Annoto Dashboard page.
In order to learn more about the wonderful things you can do with Annoto, visit the Annoto Widget Guide page.