Top

Articles in this section

How to Set Up SAML Single Sign-On with G-Suite?

Avatar
Businessmap Help
  • Updated

Note: This is a customized version of the general G-Suite SAML setup guide found here.

  1. Sign in to your Google Admin console using an administrator account. 
  2. From the Admin console Home page, go to Apps > SAML Apps.
  3. Click Add (plus) button at the bottom right.
  4. Click Set up my own custom app.

The Google IDP Information window opens and the SSO URL and Entity ID fields automatically populate. There will also be a download button for G Suite’s certificate.

  1. In a separate browser tab or window, sign in to Businessmap with an administrator account.
  2. Open the Administration panel from the button in the upper right.
  3. Go to Integrations > Applications and click Configure on Single Sign-On.
  4. In IdP Entity Id (first field) enter the value of Entity ID (second field) from step 4.
  5. In IdP Login Endpoint (second field) enter the value of SSO URL (first field) from step 4.
  6. In G Suite’s tab download the certificate and open it in a text editor.
  7. Copy the text of the certificate (without the prefix and suffix) and paste it in IdP X.509 Certificate in Businessmap.
  8. In Attribute name for Email enter EmailAddress.
  9. (optional) In Attribute name for First Name enter FirstName.
  10. (optional) In Attribute name for Last Name enter LastName.

Note: These fields represent the names of the attributes that hold the user’s first and last name. This information is utilized when a user logs in for the first time in Businessmap. An account is automatically provisioned for that user and, if the above-mentioned attributes are present, the user’s name will be filled in the account. You can find out more about user provisioning with SSO in Businessmap here.

  1. (optional) Check Enable login with both SSO and Businessmap. This will enable you to still log in with your Businessmap credentials from https://kanbanize.com/user-login/ in case the SSO configuration is not successful. You can later disable this option.
  2. Click on Save Settings.
  3. Turn on the integration by clicking the toggle next to Single Sign-On on the left.

    SSon_on.png

  4. Back in G-Suite’s tab press Next.
  5. Enter Businessmap for Application Name.
  6. (optional) Enter a description of the app for your team.
  7. (optional) Upload a logo. You can use this one:
        

             

 

  1. Press Next.
  2. In ACS URL enter https://<subdomain>.kanbanize.com/saml/acs 

(replace <subdomain> with your company’s custom Businessmap subdomain, e.g. https://yourcompany.kanbanize.com/saml/acs)

  1. In Entity ID enter https://<subdomain>.kanbanize.com/
    (make sure you don’t omit the / at the end)
  1. For Start URL enter https://<subdomain>.kanbanize.com/ctrl_login/finish_saml_login
  2. In the end, the configuration window should look like this:

 service_provider.png

Leave the other fields unchanged and press Next.

  1. On the next screen, click Add New Mapping, enter EmailAddress and select Basic Information and Primary Email.
  2. (optional) Click Add New Mapping, enter FirstName, and select Basic Information and First Name.
  3. (optional) Click Add New Mapping, enter LastName and select Basic Information and Last Name.

Attribute_mapping.png

  1. Click Finish on this and OK on the next window.
  2. With the newly created app selected click Edit Service in the upper right corner.

Off_everyone_sso.png

 

  1. Select the appropriate organizational unit, set Service status to On for everyone, and click Save. (more info on G-Suite user provisioning can be found here)
  1. Done! You are ready to give your new SSO integration a test run.

Related articles