Set up Google SSO
Article to help you setup an Googgle SAML application for use with DecisionRules.
Last updated
Article to help you setup an Googgle SAML application for use with DecisionRules.
Last updated
Create custom SAML Application
In the Google admin portal navigate to Apps -> Web and mobile apps -> Add app -> Add custom SAML app.
Once there choose a name for the app and optionally a description and icon. Click on Continue
In the next step, you will see the SSO URL, Entity ID and Certificate. From these values, save the SSO URL and Certificate that we will need later. Click Continue.
In the next step, set the necessary information and save it for later.
For the Entity ID you can put in any easily identifiable name.
For the ACS URL put the address of your server (API) container with "/saml/callback" following.
example: "https://api.sandbox.decisionrules.io/saml/callback"
For the Name ID format choose EMAIL
For the Name ID choose Basic Information > Primary email
Click Continue.
Leave as is, no need to set anything up.
These are the environment variables you will have to provide to your server container. These environment variables are from previous steps. Alternatively, you can find them in the application details in the Service provider details and Manage certificates in this section
SAML_ISSUER - Entity ID
SAML_CALLBACK_URL - ACS URL
SAML_CERT - Certificate
SAML_ENTRY_POINT - SSO URL
The SAML_CERT has to be provided as a single line argument without the
------ BEGIN/END Certificate ------
More about SSO Environment variables here.
In the created custom SAML application click on User Access.
Click on Groups
Search for a group a click on it.
Change Service status to ON.
You can find more basic information with examples here: Setup Single Sign-On (SSO)
