Preparation
You can set up the SSO connection yourself in your anny admin area under SSO & Security. In addition to anny admin rights, you need access to the admin area of your Google Workspace.Setup
To set up SSO, you need to complete the following steps. Important: you must be an administrator in your Google Workspace for this setup. First, go to the admin area of your Google Workspace at https://admin.google.com and sign in if needed. Now go to Apps > Web and mobile apps. We now add a new app that enables login via SSO. To do this, select “Add app” and then “Add custom SAML app”.
Here you can now assign a name for the app. Name it, for example, “anny SSO Login”. If you like, you can also upload the anny logo as the app icon.
In the next view, you find the data required for the setup in anny. Go to the SSO settings in the admin area, select “Add IdP”, and then choose “Google Workspace” as the provider. Fill out the form under “2. Insert SAML metadata” as follows:
- Select the “Manual” option.
- Under “Entity ID”, insert the URL given in Google Workspace as the Entity ID.
- Under “X509 certificate”, insert the certificate given in Google Workspace as the certificate.
- Under SSO URL and SLO URL, insert the URL given in Google Workspace as the SSO URL for each.
- Under “ACS URL”, insert the URL given in anny as the ACS URL. To do this, you need to click “Show details” under “1. Copy the application metadata”.
- Under “Entity ID”, insert the URL given in anny as the Entity ID.
- Enable the “Signed response” checkbox.
- Under “Name ID format”, select the “PERSISTENT” option.
In anny, you can now click Save. In Google Workspace, click Continue.
Now we still need to set which attributes should be transferred from Google to anny. To do this, we need to apply an attribute mapping in Google Workspace. The following mappings need to be set (Google directory attributes > App attributes):
- First name > givenName
- Last name > surname
- Primary email > mail
If you also want to transfer groups to anny, for example to automatically assign roles or communities to users, you can also set which group memberships should be transferred.
Now click Finish to complete the setup in Google Workspace as well.