Skip to main content

Configuring Single Sign-On (SSO) with SAML using Google

Filippo Schiano di Pepe avatar
Written by Filippo Schiano di Pepe
Updated over a month ago

This guide will help you configure Single Sign-On (SSO) with SAML using Google as your Identity Provider (IdP) for Teachfloor.

Prerequisites

  • A Google Workspace account with admin access.

  • A Teachfloor account with admin privileges.

  • Access to the Google Admin Console.

Step 1: Create a New SAML App in Google Admin Console

  1. Sign in to Google Admin Console at admin.google.com.

  2. Navigate to Apps > Web and mobile apps.

  3. Click on Add App > Add custom SAML app.

  4. Enter an App Name (e.g., "Teachfloor SSO") and optionally upload an app logo.

  5. Click Continue.

Step 2: Retrieve SAML Configuration from Google

  1. On the Google IdP Information page, download the IDP metadata file or copy the SSO URL, Entity ID, and Certificate.

  2. Click Continue.

Step 3: Copy SAML Details from Google and Enter Them in Teachfloor

  1. Log in to Teachfloor and go to Settings > Integrations.

  2. Under Single Sign-On Settings, enable SSO by toggling the switch.

  3. Select SAML as the ID Provider.

  4. Copy the following details from Google and enter them in Teachfloor:

    • Entity ID: Copy from Google and paste into Teachfloor.

    • Login URL: Use the SSO URL from Google.

    • Certificate (x509): Copy from Google, remove the header (-----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----), and ensure the entire certificate is pasted as a single line in Teachfloor.

  5. Click Save.

Step 4: Use Teachfloor SAML Configuration

To correctly set up your SSO in Google, use the following configurations provided by Teachfloor:

  • SP Entity ID: Provided by Teachfloor.

  • Assertion Consumer Service (ACS URL): Provided by Teachfloor.

Enter these values in the corresponding fields in Google Admin Console.

Step 5: Configure SAML Attributes Mapping

  1. Click Add mapping and configure the following attributes:

    • Primary email → email

    • First name → first_email

    • Last name → last_email

  2. Click Finish.

Step 6: Test SSO Login

  1. Open an Incognito window.

  2. Go to your Teachfloor login page.

  3. Click on Login with SSO.

  4. Enter your Google Workspace credentials.

  5. If configured correctly, you will be redirected to Teachfloor.

Troubleshooting

  • If login fails, verify that the Entity ID, Login URL, and Certificate match those provided by Google.

  • Ensure that user email addresses in Google match those in Teachfloor.

  • Check Google Admin settings to confirm that the SAML app is enabled for the correct users.

By following these steps, you should have successfully configured SSO for Teachfloor using Google SAML. If you encounter any issues, reach out to our support team for assistance.

Did this answer your question?