Set up Google SSO

Article to help you setup an Googgle SAML application for use with DecisionRules.

Create custom SAML Application

In the Google admin portal navigate to Apps -> Web and mobile apps -> Add app -> Add custom SAML app.

App details

Once there choose a name for the app and optionally a description and icon. Click on Continue

Google Identity Provider details

In the next step, you will see the SSO URL, Entity ID and Certificate. From these values, save the SSO URL and Certificate that we will need later. Click Continue.

Service provider details

In the next step, set the necessary information and save it for later.

• For the Entity ID you can put in any easily identifiable name.

• For the ACS URL put the address of your server (API) container with "/saml/callback" following.

  • example: "https://api.sandbox.decisionrules.io/saml/callback"

• For the Name ID format choose EMAIL

• For the Name ID choose Basic Information > Primary email

Click Continue.

Attribute mapping

Leave as is, no need to set anything up.

Decision Rules SSO setup

Here you can find more info how set up SSO in DR application.

• Entry point - SSO URL

• Issuer - Entity ID

• Callback Url - ACS URL

• Certificate - Certificate

Adding Groups

In the created custom SAML application click on User Access.

• Click on Groups

• Search for a group a click on it.

• Change Service status to ON.