Skip to main content

How to setup an SAML SSO using Google Admin (Workspace)?

Updated

Details of the steps required to configure a SAML SSO between Edflex and Google Admin.

 

Learn how to set up an automatic login (SSO). This will allow your learners to not have to login manually to Edflex if they are already logged into your Google Active Directory.

  1. Add an new Application
  2. Set up SSO
  3. Activate app & Restrict access to a group of users
  4. Troubleshooting

1. Add a new application

From the left-hand menu of your admin area, click on Apps > Web & Mobile Apps.
On the first line of the table, click on Add custom SAML app (as in the example below):

capture-decran-2023-01-20-a-11_1irvykn.png

2. Set up SSO

After clicking on Add custom SAML app, a new window opens.

Configure application details (name and logo).

capture-decran-2023-01-20-a-11_n8i6lm.png

ℹ️ Vous pouvez demander une image au bon format à votre contact chez Edflex.

 

Download metadata.xml file

Click on Download metadata

capture-decran-2023-01-20-a-11_2d5z9t.png
This is the file you need to provide to your Edflex technical contact so that the configuration can be finalized.

Fill in information shared by Edflex

ℹ️ This information is available in the metadata.xml file shared by Edflex. (EntityID url, AssertionConsumer Service url)
If necessary, please contact your technical contact person, who will be able to help you fill in these fields.

Fill in the fields as in the example below: capture-decran-2023-01-20-a-11_pq49at.png

Set up attributes

Three attributes are mandatory to set up a SSO with Edflex:

  • Firstname
  • Lastname
  • Email

Values in the "App Attributes" column should be shared to Edflex as they are.

If another attribute is required as a unique identifier (e.g. personnel number), it is necessary to perform the mapping in the Google interface.

capture-decran-2024-06-10-a-18_1smf5og.png


Click FINISH.

Congratulations, your application is created 🚀


3. Activate app & Restrict access to a group of users

From the User Access section of the application, select "On for everyone".

If you wish to restrict access to a specific population, select the desired groups.


Please note that it can take up to 24 hours to be propagated on Google.

capture-decran-2023-01-20-a-11_1kuexi5.png

4. Troubleshooting

Error 403


403. That’s an error. Error: app_not_configured_for_user Service is not configured for this user.

Or

403. That’s an error. Error: app_not_enabled_for_user Service is not enabled for this user.

What does it mean? The SSO has been set up between for your company and Edflex, but your profile is not allowed to go to pass it.
How to solve it? Please contact your Training and/or IT team in order to validate your eligibility to Edflex portal.

Related articles