Skip to main content
In this article, you learn how to set up a company login with Google Workspace in anny.

Preparation

You can set up the SSO connection yourself in your anny admin area under SSO & Security. In addition to anny admin rights, you need access to the admin area of your Google Workspace.

Setup

To set up SSO, you need to complete the following steps. Important: you must be an administrator in your Google Workspace for this setup. First, go to the admin area of your Google Workspace at https://admin.google.com and sign in if needed. Now go to Apps > Web and mobile apps. We now add a new app that enables login via SSO. To do this, select “Add app” and then “Add custom SAML app”. Add app in Google Workspace Here you can now assign a name for the app. Name it, for example, “anny SSO Login”. If you like, you can also upload the anny logo as the app icon. Name the app In the next view, you find the data required for the setup in anny. Go to the SSO settings in the admin area, select “Add IdP”, and then choose “Google Workspace” as the provider. Fill out the form under “2. Insert SAML metadata” as follows:
  1. Select the “Manual” option.
  2. Under “Entity ID”, insert the URL given in Google Workspace as the Entity ID.
  3. Under “X509 certificate”, insert the certificate given in Google Workspace as the certificate.
  4. Under SSO URL and SLO URL, insert the URL given in Google Workspace as the SSO URL for each.
Now click Continue in Google Workspace so we can enter the corresponding information here. Fill out the fields as follows:
  1. Under “ACS URL”, insert the URL given in anny as the ACS URL. To do this, you need to click “Show details” under “1. Copy the application metadata”.
  2. Under “Entity ID”, insert the URL given in anny as the Entity ID.
  3. Enable the “Signed response” checkbox.
  4. Under “Name ID format”, select the “PERSISTENT” option.
Google Workspace SAML configuration In anny, you can now click Save. In Google Workspace, click Continue. Now we still need to set which attributes should be transferred from Google to anny. To do this, we need to apply an attribute mapping in Google Workspace. The following mappings need to be set (Google directory attributes > App attributes):
  • First name > givenName
  • Last name > surname
  • Primary email > mail
Attribute mapping If you also want to transfer groups to anny, for example to automatically assign roles or communities to users, you can also set which group memberships should be transferred. Group memberships Now click Finish to complete the setup in Google Workspace as well.