Setting up SSO with Google Workspace

To enable Single Sign On (SSO) for your Google Workspace,

1. Log-in to your Google Workspace Admin Console (admin.google.com)
2. Navigate to Apps > Web and mobile apps
3. Click Add app > Add custom SAML app
   1. 
4. On the App details page, enter some information about this app (some suggested information is below that you can copy/paste) and click Continue.
   1. App name: Leadline
   2. Description: This application authorizes our users to sign-in to Leadline using our Google Workspace ID.
   3. App icon: You can download our official logo by clicking here
   4. 
5. On the Google Identity Provider details page;
   1. Copy the SSO URL and paste that into the Leadline 'SAML Endpoint' field
   2. Copy the Certificate (be sure the certificate is valid, else refresh a new one) and paste that into the Leadline 'Public x509 certificate' field
   3. Click Continue
   4. 
6. On the Service provider details page;
   1. Copy the 'Single Sign-On URL' value from Leadline and paste that into the 'ACS URL' field in Google.
   2. Copy the 'Identity provider entity ID' value from Leadline and paste that into the 'Entity ID' field in Google.
   3. Click Continue
   4. 
7. On the Attribute mapping page;
   1. Use the 'Add Mapping' button to map three fields from Google Directory --> App attributes (Leadline)
      1. First name --> firstName
      2. Last name --> lastName
      3. Primary email --> email
   2. Click Finish
   3. 

Once configured, you can now use the 'Sign in with Google' button on the log-in screen. To test your integration,

• Log out of Leadline
• Try logging in using the 'Sign in with Google' button
• Leadline will prompt you to sign-in with Google. Upon successfully sign in (successful authorization), you will be re-directed to your Leadline dashboard.