How to set up SSO with Google?
This article describes how to configure Google Workspace as a SAML 2.0 Identity Provider for Kiflo.
You must first enable SSO on your account.
Configure Google
Please refer to the official Google documentation: https://support.google.com/a/topic/7556794?hl=en&ref_topic=7556686&sjid=9198335712994365360-EU
The instructions below may vary depending on changes made by Google.
Register Kiflo as a private web application
Open your Google Admin space and navigate to:
- Apps
- Web and mobile apps
Then, click on Add app > Add custom SAML app:
- Set the App Name in the App details form to: Kiflo PRM
- Click Continue
On the Google Identity Provider details step:
- Copy the SSO URL
- Copy the Certificate
On the Service Provider Details step, you must input information provided by Kiflo:
- Open Kiflo
- Open the top-right user menu
- Click on Account
- Then Security
Fill in the Service Provider Details form as follows:
- ACS URL = The [Service Provider Callback URL] provided by Kiflo
- Entity ID = The [Service Provider Entity ID] provided by Kiflo
- Name ID format = EMAIL
- Name ID = Basic information > Primary email
Then click Continue and Finish.
Allow users to sign in via SSO
By default, the new app is disabled for all users. You must turn it on for all users or at least the users who must sign in via SSO.
On the new app's page:
- In the section User access
- Click "OFF for everyone"
- Then select "ON for everyone"
- Save
Configure Kiflo
Go back to Kiflo, on the Security page, fill in the form as follows:
- Identity Provider Login URL = The [SSO URL] provided by Google
- Identity Provider Certificate = The [Certificate] provided by Google
Click Save, and you're all set up!