This article will guide you through the steps to set up Team Single Sign-on (SSO) for G-Suite. First, refer to this article to complete the initial steps of setting up SSO.
Once you've completed the initial steps, follow the instructions below to continue SSO configuration for G-suite.
1. In your Workspace, click on your Profile> SSO Configuration.
2. Click on the Dashboard Accounts tab, and complete the two-step setup.
Step 1: Configure Attributes on your IdP: Google
In Step 4, set the Name ID and Name ID Format as follows:
- Name ID to Basic Information and Primary Email
- Name ID Format to EMAIL
In Step 5 of the creation of Google SAML Application, you will need to provide the mapping that will be used.
- Click on
Add New Mapping.- For
application attribute, entername. Then selectBasic Informationandname.
- For
- Add another mapping by clicking on
Add New Mappingagain.- For
application attribute, enteremailaddress. Then selectBasic InformationandPrimary Email. - Click Save once you've completed the steps above.
- For
Step 2: Fill in the parameters you obtained from Google
1. Under Provide us you SAML parameters section, click on the Add SAML configuration button.
2. Fill in the details you obtained from Google. You may also choose to upload the metadata file provided.
3. Then, select Test Configuration.
3. You will be redirected to the Google domain to be authenticated.
Continue to log in using your SSO credentials.
4. You will then be redirected to your Pigeonhole Live Workspace.
Select Apply new configuration to save the SSO configuration you have just set up. This indicates that the SSO configuration is successful.
If you wish to discard the new set up and revert to your old SSO configuration, select Keep existing configuration.
5. Inform your account manager of the completed setup.
Your account manager will then turn Team SSO on for your Team Workspace. Your workspace members will receive an email informing them of their new sign-in instructions.