Google Workspace SAML Configuration
This document outlines the process for configuring Google Workspace as a SAML identity provider for Willba. This documentation is relevant for Willba customer company IT personnel who have access to the company's Google Workspace admin.
Step 1: App Setup
- Navigate to the Google Workspace Admin Panel.
- Select
Apps
from the side menu, then click onWeb and mobile apps
. - Click on the
Add app
button. - In the dropdown menu that appears, select
Add custom SAML app
.
Step 2: App Configuration
- Name your new app
Willba
. - Click
Continue
to proceed to the next step. - Download the metadata file. This file will be needed for communication between Willba and Google Workspace, so ensure you store it securely.
- Share the downloaded metadata file with your Willba contact person.
- Click
Continue
to move to the next step.
- Configure the SAML settings with the following values:
- ACS URL:
https://auth.willba.app/realms/{realm-name}/broker/{saml-alias}/endpoint
- Entity ID:
https://auth.willba.app/realms/{realm-name}
- ACS URL:
Replace {realm-name}
and {saml-alias}
with the values provided by your Willba contact person.
- Map the attributes as follows: firstName, lastName, email (see image below for reference).
- Add relevant Google Groups into Group membership mapping. Use App attribute name
groups
- Click
Finish
to complete the app configuration.
Take screenshot(s) of your attribute mappers to share it with your Willba contact person.
Step 3: User Access Setup
- Navigate to
User Access
within the app settings. - Set the application status to
ON for groups you want to have access to Willba
. - Click
Save
to apply the changes.
This process allows all users in your Google Workspace to access Willba via SSO (Single Sign-On) functionality.
Step 4: Finalization
The login will work after the Willba contact person adds the SAML settings to the application.
Make sure to test the setup with a few users to confirm everything is working as expected. If you encounter any issues, please reach out to your Willba contact person.
For Willba administrators configuring Keycloak, please refer to the SAML Admin Documentation.