Details of the steps required to configure a SAML SSO between Edflex and Google Admin.
Learn how to set up an automatic login (SSO). This will allow your learners to not have to login manually to Edflex if they are already logged into your Google Active Directory.
- Add an new Application
- Set up SSO
- Activate app & Restrict access to a group of users
- Troubleshooting
1. Add a new application
From the left-hand menu of your admin area, click on Apps > Web & Mobile Apps.
On the first line of the table, click on Add custom SAML app (as in the example below):
2. Set up SSO
After clicking on Add custom SAML app, a new window opens.
Configure application details (name and logo).
ℹ️ Vous pouvez demander une image au bon format à votre contact chez Edflex.
Download metadata.xml file
Click on Download metadata
This is the file you need to provide to your Edflex technical contact so that the configuration can be finalized.
Fill in information shared by Edflex
ℹ️ This information is available in the metadata.xml file shared by Edflex. (EntityID url, AssertionConsumer Service url)
If necessary, please contact your technical contact person, who will be able to help you fill in these fields.
Fill in the fields as in the example below:
Set up attributes
Three attributes are mandatory to set up a SSO with Edflex:
- Firstname
- Lastname
Values in the "App Attributes" column should be shared to Edflex as they are.
If another attribute is required as a unique identifier (e.g. personnel number), it is necessary to perform the mapping in the Google interface.
Click FINISH.
Congratulations, your application is created 🚀
3. Activate app & Restrict access to a group of users
From the User Access section of the application, select "On for everyone".
If you wish to restrict access to a specific population, select the desired groups.
Please note that it can take up to 24 hours to be propagated on Google.
4. Troubleshooting
Error 403
403. That’s an error. Error: app_not_configured_for_user Service is not configured for this user.
Or
403. That’s an error. Error: app_not_enabled_for_user Service is not enabled for this user.
What does it mean? The SSO has been set up between for your company and Edflex, but your profile is not allowed to go to pass it.
How to solve it? Please contact your Training and/or IT team in order to validate your eligibility to Edflex portal.