> Clumio user guide > Administer > Access management > Authentication > Configuring SSO

Configuring SSO for Google

You can integrate the Clumio service with Google for seamless user authentication. Follow the steps below to configure Google IDP as a Single Sign On service for Clumio.

Prerequisites

Ensure that you have the following before you start configuring Google as an IDP:

  • Google account with admin privileges

  • Clumio account with Super Admin Role

Enable Google integration with Clumio

In Google

  1. Log into the Google Admin Console.

  2. Go to Apps > Web and mobile apps.

  3. Click Add App > Add custom SAML app

    google

  4. Enter the App Name and then click Continue.

    google

  5. Click Download Metadata to download the metadata, and then click Continue.

    google

  6. The following screen appears:

    google

  7. From step 4 in the Clumio setup below, copy the following:

    • Audience restriction to Entity ID

    • ACS URL to ACS URL

  8. Ensure that the Signed response check box is selected.

    google

  9. Click Continue with all the other default settings.

  10. Turn on the app for appropriate users or organizational units.

    google

  11. Click Save and then return to the app.

  12. On the SAML attribute mapping screen, make sure that the primary email maps to: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress.

    google

  13. Proceed to complete the setup in Clumio.

In Clumio

  1. Log on to Clumio.

  2. Navigate to Settings > Access Management > Authentication (SSO/MFA).

  3. Click Configure SSO.

  4. Copy the Audience Restriction, Assertion Customer Service (ACS) URL, and the Sign-On URL.

    This information is needed for step 7 on the IdP side setup, above. 

  5. Scroll down and upload the metadata retrieved from the IdP.

    You can use the URL, upload the metadata XML file, or configure it manually. 

  6. Click Save Configuration and then click Test with my Account.

    A new tab will open to test the SSO connection.

  7. Once the connection test is successful, click Activate SSO.

This step is important for SSO enablement.

  1. Optionally, enable the check box to send emails to notify all users of the SSO enablement, or else click Enable.

Note

For any user to utilize Clumio login through Google SSO, the user needs to be explicitly added from the Clumio UI (Settings > Access management > Users).

×

Loading...