Google Workspace

This guide explains how to configure SSO for the Connect Platform using Google Workspace as an Identity Provider.

Creating an Application

1. Go to the Google Admin Console and log in with an admin account.
2. Navigate to Apps > Web and mobile apps.
3. Click Add App > Add custom SAML app.
4. Click Continue.

5. Enter the application name (e.g., "Dataggo") and optionally upload a logo.

6. Download the IDP metadata or note the following information:

• SSO URL (Login URL)
• Entity ID (SSO Entity ID)
• Certificate (Download the certificate file)

7. Copy all the values into the fields of the Connect Platform.

Set Logout URL to https://accounts.google.com/o/logout

8. Continue to the next page.
9. Copy the information from the Connect Platform into the Google app.
10. Set Name ID format to EMAIL.
11. Click Continue to the next page.
12. Add the following attribute mappings to send claims to the Connect Platform:
    • Primary email to email
    • Group membership to groups. Select the relevant groups for:
      • Administrator: Full access
      • User: Launch and modify jobs
      • Read Only: Read only

13. Specify the corresponding 3 groups in the Connect Platform.

• Administrator: Full access
• User: Launch and modify jobs
• Read Only: Read only

14. Save the changes in both the Connect Platform and the Google application.

Granting Access Rights to the Google Application

1. On the applications page, click the desired application
2. By default, the application is not accessible. Click on User access to open a configuration page.
3. Select the group you want to grant access to.
4. Toggle the Service status to ON.
5. Save and repeat for the other groups.
6. Back on the homepage, the User Access will be displayed as active for all selected groups.