In this article, you will learn how to set up a company login with Google Workspace at anny.
Preparation
You can set up the SSO connection yourself in your anny admin area under SSO & Security. In addition to the anny admin rights, you need access to the admin area of your Google Workspace.
Setup
To set up SSO, you must follow the steps below. Important: You must be an administrator in your Google Workspace for this setup.
Firstly, go to the admin area of your Google Workspace at https://admin.google.com and log in if necessary. Now go to Apps -> Web and mobile apps.
We will now add a new app that allows you to log in via SSO. To achieve this, select "Add app" and then "Add customized SAML app".
Here you can now assign a name for the app. For example, call it "anny SSO Login". If you like, you can also upload the anny logo as an app icon.
In the next view, you will now find the data required to set up anny. To do this, go to the SSO settings in the admin area and select "Add IDP" and then select "Google Workspace" as the provider. Complete the form under "2. Insert SAML metadata" as follows:
Select the "Manual" option.
Under "Entity ID", enter the URL that is specified as the entity ID in Google Workspace.
Under "X509 certificate", insert the certificate that is specified as the certificate in Google Workspace.
Under SSO URL and SLO URL, enter the URL that is specified as the SSO URL in Google Workspace.
Now go to continue in Google Workspace so that we can enter the relevant information here. Fill it in as follows:
Under "ACS URL", enter the URL that is specified as the ACS URL in anny. To achieve this, click on "Show details" under "1. Copy application metadata".
Under "Entity ID", enter the URL that is specified as the entity ID in anny.
Activate the "Signed response" checkbox.
Select the "PERSISTENT" option under "Name ID format".
In anny you can now press Save. In Google Workspace, press continue.
We now need to set which attributes we want to transfer from Google to anny. To do this, we need to transfer an attribute assignment in Google Workspace. The following mappings must be set (Google directory attributes -> app attributes):
First name -> givenName
Last name -> surname
Primary email -> mail
If you also want to transfer groups to anny, e.g. to automatically assign roles or communities to users, you can also set which group memberships should be transferred.
Now press Finish to complete the setup for Google Workspace as well.