Ideally, the security in the MS would work like this: everybody is allowed to use the Media Suite, however, when you want to view content or use the workspace you need to be logged in. Optionally, also the workspace can be used by everyone. We may need to facilitate the creation of user accounts (separate from the federated login) or store session data in that case.
