Magento G Suite / Google Apps SSO Login | Single Sign-On (SSO) with G Suite SAML IdP

Overview

Google Apps / G Suite Single Sign-On (SSO) login for Magento [SAML] can be achieved by using our Magento SAML SP Single Sign-On (SSO) plugin. Our SSO solution will make Magento SAML 2.0 compliant Service Provider establishing trust between the Magento site and Google Apps to securely authenticate and login users to the Magento site. Our Magento Single Sign-On (SSO) solution helps to secure Magento sites behind the SSO login so that users are authenticated using their Google Apps login credentials. Seamless support for advanced SSO features like Attribute / Custom Mapping, Role Mapping etc. SAML allows information to be exchanged between Service Providers and Identity Providers; SAML is the integration of Service Providers and Identity Providers. When a user attempts to log in, your Service provider delivers SAML assertions to Identity Provider, which contain information about the user. The assertion is received by Identity Provider, which validates it against your Service Provider settings before allowing the user access to your org. Here we will go through a guide to configure SAML Single Sign-On SSO login between Magento site and Google Apps by considering Google Apps / G Suite as IdP (Identity Provider) and Magento as SP (Service Provider). Our SSO plugin provides Unlimited user authentications from Google Apps / G Suite. To know more about other features we provide in you Magento SAML Single Sign-On (SSO) plugin, you can click here.

Steps to configure Google Apps SAML Single Sign-On (SSO) Login into Magento SAML SP

1. Setup G Suite / Google Apps as IdP (Identity Provider)

Follow the steps below to configure Google Apps as IdP for Magento

• In the Magento SAML SP SSO plugin, navigate to Service Provider Metadata tab. In this tab you will find the SP metadata such as SP Entity ID and ACS (AssertionConsumerService) URL which are required to configure Google Apps as the Identity Provider.

• Go to https://admin.google.com and login with your G Suite administrator account.
• Navigate to the Apps tab in the left menu and click on Web and mobile apps.

Add a SAML App

• Click on the Add App button, then in the dropdown select Add Custom SAML app tab to create a new saml app.

• Enter details for your custom SAML app and click on Continue button.

IDP Information

• Click on Download Metadata button. This will be used for configuring your Service Provider.
• You can also copy G Suite details like SSO URL, entity ID and Certificate to configure the Service Provider manually and then click on Continue button.

Service Provider Details

• Enter details from the Service Provider Metadata tab in the SAML SP plugin.

ACS URL	Copy and paste the ACS URL from the plugin.
Entity ID	Copy and paste the SP Entity ID/ Issuer from the plugin.
Signed Response	Check Signed Response ✓
Name ID Format	EMAIL

• Click on Continue button.

Attribute Mapping

• Click on Add Mapping button.

• Add and select user fields in Google Directory, then map them to Service Provider attributes and Click on Finish button.

User Access to Configured App

• Go to SAML Apps again and click on OFF for everyone .

• Then, select ON for everyone to activate SSO.

Additional Resources

• What is Single Sign-On (SSO) Login?
• How to setup SAML SSO Login with Google Apps/ G suite
• G Suite SAML SSO Login - Attribute Mappings
• What is SAML? How SAML SSO works?
• Magento SAML Single Sign On (SSO) Plugin.

Get in Touch

Please reach out to us at magentosupport@xecurify.com, and our team will assist you with setting up the Magento OAuth Server Extension. Our team will help you to select the best suitable solution/plan as per your requirement.