SSO is intended for accounts with multiple users who take the extra security measure of signing into third-party applications using an identity provider. Use the steps below to complete this Google SAML configuration with our team's assistance. If you aren't currently working with someone from our team, please reach out to us so our support team can complete this with you.
You'll need a Google Admin account to complete the configuration.
App Configuration
- Log into your Google Admin account
- Click Apps
- Click Web and Mobile Apps
- Click Add App, and from the dropdown, select Add Custom SAML App
- Add a Name and Description (optional). For easy management, we recommend naming it "Cube."
- Our support team will need the SSO URL, Entity ID, and Certificate (base 64 version). You can send us these individually or click Download Metadata and send the file.
- On the service provider details page:
- ACS URL: Enter the URL you receive from our support team
- ENTITY ID: Enter the ID you receive from our support team
- Under Start URL, check the box for Signed Response
- Under Name ID, select:
- Basic information > Primary email
- Attribute mappings (case-sensitive):
- Click Finish
Turn service on for users
It may take a moment, but when Google finishes processing the app configuration, Cube will show in the list.
- Click on the app to open it
- In User Access, click View Details. Users won't have access by default, so you can choose to turn it on for everyone or for a subset of users. If a user tries to use Google SSO to sign into Cube and they aren't in the group of users who have access here, they won't be able to log in.
Accessing your account with single sign-on (SSO)
After our team has configured Google SAML SSO for your Cube instance, you'll be able to use it to sign in:
1. Select Sign in with Google
2. Enter your Google credentials
3. You will be redirected to Cube after successfully authenticating