G Suite - SAML Integration

Use these instructions to configure your Google Business Apps with WhosOffice for single sign on.

If you require any assistance with this setup please contact support@whosoffice.com

Pre-requisites

  • You will need an administrator account to access the Google Admin Console
  • You need to have an existing account with WhosOffice
  • You will need an Administrator role on WhosOffice to complete these steps

1. Identify your sub-domain from WhosOffice

  1. Login to your WhosOffice account
  2. From the Settings menu, go to Company
  3. Make a note of your sub-domain from this page, it will be in bold as shown below.

Your company sub-domain

2. Configure your Google account

  1. Login to your Google admin console
  2. From the Home page, go to Apps, then click on SAML apps
    Google admin console SAML apps
  3. Click on the + bottom right
  4. Locate and click "WhosOffice" in the application list

3. Configure Google IdP Information

  1. On the Google IdP information page, download the "IDP metadata" file to a location on your computer (remember this for later)
    Google IdP Information
  2. Click Next
  3. On the Service Provider details page, provide the following information:
  1. Edit the ACS URL by replacing {sub-domain} with your company's dedicated sub-domain provided by WhosOffice, see step 1 above.
  2. Ensure the entity ID is whosoffice
  3. Ensure the Name ID values are
    1. Basic Information
    2. Primary Email
  4. Click on Next & Finish
    Google IdP Configuration

4. Configure your WhosOffice account

  1. Login to your WhosOffice account
  2. From the Settings menu, go to Company
    WhosOffice company
  3. Click on the "Apps / Integrations" tab
    Apps and Integrations
  4. Select "Google" from the provider drop down and click on "Activate Login Provider"
  5. Using the form, browse to the IdP metadata file you downloaded in step 3, click on Upload
    Upload metadata file
  6. Click on Save Changes
    Note: If you would like to force users to Authenticate through Google (for online logins only), make sure "Force SAML" is selected as "Yes" then click on "Save Changes".

5. Enable WhosOffice SAML connector

  1. Login to your Google admin console
  2. From the Home page, go to Apps, then click on SAML apps
  3. Select WhosOffice
  4. At the top right of the grey box, click Edit Service
  5. Ensure that your WhosOffice user account email addresses match those in your Google domain

6. Verify that SSO is working

  1. Navigate to https://{sub-domain}.my.whosoffice.com
    Remember to replace {sub-domain} with your company's dedicated sub-domain from Step 1.
  2. If you have chosen to "Force SAML" you will automatically be redirected to the Google sign-in page
  3. If you have chosen NOT to "Force SAML" you will see the WhosOffice login screen with an option to login through Google.
    Your new login page
  4. After you have authenticated your login with Google you will be redirected to your WhosOffice account.

 


Title: G Suite - SAML Integration
Category: Integrations
Posted: Wednesday, 29th Jan 2020
By: Tony Bushell
Direct link: https://www.whosoffice.com/support/knowledgebase/g-suite-saml-integration


View all knowledgebase articles

Close menu Home Features Pricing Support Contact us Our blog Free Trial