Configuring G Suite as the Identity Provider

Configuring G Suite as the Identity Provider


Role Required: SDAdmin

  1. Log in to Google Workspace.
  2. Go to Apps > Web and mobile apps.
  3. Click Add app > Add custom SAML app.

  1. Provide the App name and Description.
  2. Upload the App icon and click Continue.

  1. On the displayed page, download the certificate under Option 2.

  1. In AssetExplorer, go to Admin > Organizational Settings > SAML Single Sign On.
  2. Under Configure Identity Provider Details, provide the SSO URL of Google Workplace as Login URL.
  3. Set Algorithm as RSA_SHA256.
  4. Click Choose File to upload the certificate.
 
  1. Go back to your Google Workspace account and click Continue on the Google Identity Provider details page.
  2. In the Service provider details page, copy and paste the Assertion Consumer URL and Entity ID from the AssetExplorer SAML configuration page in the required fields.
  3. Select the Name ID format as EMAIL and the Name ID as Basic Information > Primary email.
The Name ID format configured in Google Workspace should match that of AssetExplorer.  Make sure to select the Name ID Format as Email Address in the SAML configuration page in AssetExplorer. Learn more.
  1. Click Continue.
  2. On the Attribute mapping page, you have the option to add additional attributes to create a user profile in AssetExplorer.
  3. Click Finish to complete the app configurations.

  1. On the Google Workspace, click to view the newly created app configurations, and then click Edit details.
  2. Under the User access section, set the service status as ON for everyone.


You have now configured AssetExplorer as a service provider in Google Workspace.

See also Configuring SAML in AssetExplorer