Configuring Attendee SSO for G Suite

This article will walk you through the steps for setting up Attendee Single Sign-on (SSO) for G Suite. First, refer to this article to complete the initial steps of setting up SSO.

Once you've completed the necessary steps follow the instructions below to continue SSO configuration for G Suite. 

1. Go to your Pigeonhole Live account. Click on your Profile > SSO Configuration.

2. Click on the Attendees tab and complete the two-step setup.

Configure Attributes on your IdP: Google

In Step 4, set up the Name ID and Name ID Format as follows:

1. Name ID to Basic Information and Primary Email
2. Name ID Format to EMAIL

In Step 5 of the creation of Google SAML Application, you will need to provide mapping that will be used.

1. Click on Add New Mapping.
   1. For application attribute, enter name. Then select Basic Information and name.
2. Add another mapping by clicking on Add New Mapping again.
   1. For application attribute, enter emailaddress. Then select Basic Information and Primary Email.
      
3. Click Save  when you are done.

Fill in the SAML parameters you obtained from Google

1. Fill in a name for your SSO Profile name according to your organisation's SSO naming convention.

2. Then, fill in the details you obtained from Google or upload the Metadata file provided, and click save.

3. After you have completed the steps above, return to your Workspace.

By default, your Pigeonholes are not configured to require SSO for attendees. To turn on SSO for your attendees, go to Pigeonhole> More settings > Security. Under Single Sign-On for Attendees, select the Attendee SSO Profile that you want to enable and click save. 

If you wish to turn off Attendee SSO, select none. 

When your event attendees enter your Event Passcode or scan your Event QR code, they will be brought to your G Suite sign-in page to be authenticated. Only after successful authentication will they be redirected to your Pigeonhole where they can start engaging.