3242376 - Configuring SSO with Google

We are using Google SAML/SSO and want to integrate our Signavio workspace into it. What steps do we have to perform?

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

The information provided does not imply that SAP Signavio Product Support have any expertise in setting up 3rd party identity provider (IdP) systems for customers. These are merely bits of information that were gathered over time while configuring the SAML SSO with identity providers, which may help you with a smoother setup. If you require assistance setting up your IdP system, please reach out to your consultant, partner, or specialized support.

The following is a list of instructions for configuring SSO with Google.

You can set up SSO using Google as an identity provider with your organization's Google Apps accounts, to start, go to your Google Admin Panel.

Once there, go from the "Apps" option to "SAML apps," then click the + button in the bottom right.

Then, fill out the information required by Google according to the following steps:

1. Choose the "Setup my own custom app" option at the bottom of the dialog page.

2. Download the IDP metadata under "Option 2".

NOTE: The IDP metadata file you have downloaded then has to be uploaded into your Signavio workspace.

3. Fill in "Signavio" as the application name.

4. Enter Service Provider Details:

• ACS URL: Which SAML ACS URL / EntityID will be used by Signavio?
• Entity ID: Which SAML ACS URL / EntityID will be used by Signavio?
• Start URL: leave blank
• Signed Response: leave unchecked
• Name ID: Basic Information; Primary Email
• Name ID Format: Email
  
  
  

5. Fill in the Attribute Mapping information.

• first_name → Basic Information → First Name
• last_name → Basic Information → Last Name
• email → Basic Information → Primary Email
  
  
  

6. Click Finish.

Now you have finished the setup in Google for your Signavio app, don't forget to;

• Assign users/groups in Google that you want to access the Signavio app.
• Upload the file that you downloaded in Step.2 above, into your Signavio workspace,
  please see Documentation Enable SSO authentication using SAML for your workspace.

KBA , BPI-SIG-CA-SEC-SAM , SAML 2.0 for SAP Signavio , How To

SAP Signavio Process Manager all versions ; Signavio Process Manager all versions