Configuring Team SSO for G-Suite

This article will guide you through the steps to set up Team Single Sign-on (SSO) for G-Suite. First, refer to this article to complete the initial steps of setting up SSO.

Once you've completed the initial steps, follow the instructions below to continue SSO configuration for G-suite.

1. In your Workspace, click on your Profile> SSO Configuration.

2. Click on the Dashboard Accounts tab, and complete the two-step setup. 

Step 1: Configure Attributes on your IdP: Google


In Step 4, set the Name ID and Name ID Format as follows:

  1. Name ID to Basic Information and Primary Email
  2. Name ID Format to EMAIL


In Step 5 of the creation of Google SAML Application, you will need to provide the mapping that will be used.

  1. Click on Add New Mapping.
    1. For application attribute, enter name. Then select Basic Information and name.
  2. Add another mapping by clicking on Add New Mapping again.
    1. For application attribute, enter emailaddress. Then select Basic Information and Primary Email.
    2. Click Save once you've completed the steps above.


Step 2: Fill in the parameters you obtained from Google 


1. Under Provide us you SAML parameters section, click on the Add SAML configuration button.

2. Fill in the details you obtained from Google. You may also choose to upload the metadata file provided. 

3. Then, select Test Configuration.


3. You will be redirected to the Google domain to be authenticated.

Continue to log in using your SSO credentials. 


4. You will then be redirected to your Pigeonhole Live Workspace.

Select Apply new configuration to save the SSO configuration you have just set up. This indicates that the SSO configuration is successful.

If you wish to discard the new set up and revert to your old SSO configuration, select Keep existing configuration. 


5. Inform your account manager of the completed setup.

Your account manager will then turn Team SSO on for your Team Workspace. Your workspace members will receive an email informing them of their new sign-in instructions.