SSO for Google Workspace (G-Suite)

This document aims to assist the subscriber to enable and setup the SSO for the Skedway application on the Google Gsuite Admin console.

This document may be out of date due to constant changes that Microsoft makes on the Azure portal.

Google does not notify you of changes made.

For these configurations, the user must have the appropriate access permissions within Google Workplace.

Mandatory requirements

• Google Workplace subscription.

• Skedway subscription with SSO feature.

Initial setup

The SSO setup will start with sending the xml certificate by the Skedway team to the customer. Upon receipt, the customer must configure them within the Google Workplace admin portal.

Below is a step by step on how to do this.

Creating a SAMAL applicatio for Skedway

1. Access Apps > SAML Apps on the Google Workplace (Old Gsuite) Admin console via https://admin.google.com/

https://admin.google.com/admin.google.com

1. In the menu Apps > sub-menu Web and mobile apps create a new SAMAL app on Add custom SAML app to start you setup.

   
2. In the custom SAML app follow the 4 steps wizzard:

   1. App details: Fill the App name and click Continue.

      
   2. Google Identity Provider details: Download the IDP Metadata (Option 1) file and send it to the Skedway's team in charge of the SSO configuration. The Skedway team will return with the necessary parameters to complete these steps within 24 hours.

      
   3. Service provider details: Fill in the ACS URL*, Entity ID* and Start URL fields with the data provided by the Skedway team as shown in the image.

      IMPORTANT: The fields Name ID and Name ID format must be filled as shown below

      • Name ID Format:EMAIL

      • Name id:Basic information > Primary Email

        
   4. Attribute mapping: Click on ADD MAPPING In order to configure the attribute that Skedway needs to work. Add the following attribute parameters:

      1. Google directory attributes: Basic information > Primary Email

      2. App Attributes: https://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddres

         

Configuration of services and user access

After the initial setup, select the added service and setup the User Access like Users, groups, or organizations that are allowed to use SSO SAML, they must be activated and configured.

To finish

Contact the Skedway team to proceed to the final validation and testing stage.

Support

If you have any question regarding this topic, please contact our support team.

E-mail: [e-mail] Skedway service desk portal: Click here!

Skedway