Skip to main content
Sign in

Configure SSO with Google Workspace

  • Updated

SmartDraw lets you provision your users using SSO through Google Workspace™.  We'll walk you through getting the right SAML metadata and attribute mapping.

Add a Custom SAML App in the Google Admin Console

First, we need to configure a new SAML app in your Google Workspace™ admin console and download the Identity Provider Metadata to make configuring SmartDraw SSO easier.

  1. Go to the Google Admin Console website (https://admin.google.com) and sign-in with your Google Workspace™ admin credentials.
  2. Go to the home page (Main menu -> Home) and click Apps.
  3. Select Web and mobile apps on the left panel.
  4. Click Add App then Add custom SAML app.

add-custom-saml-app-google-sso.png

Provide a unique name for app, we suggest SmartDraw SSO.

As the last step, download the metadata to your Downloads folder.

select-app-name-Google-SSO.png
Setting Up Your SmartDraw License for SSO

To complete the SSO configuration, we need to import the metadata file you downloaded and connect the entity URL from Google to your SmartDraw license.

Login to My Account. 

Click on SSO in the left panel.

mceclip8.png

Click on the Import SAML Metadata button.

mceclip9.png

On the next screen, select XML file and browse to the XML file you saved from Google Workspace on your computer.

mceclip10.png

SmartDraw will automatically process the imported file. You can double-check the SAML issues and URL and click Save Configuration to enable Google Workspace SSO.

mceclip11.png

When you're ready to fully enable SSO for every user, make sure you check All all users of the above domains to login using this Saml config and save your settings.

This toggle lets you check your SSO set up before users see it. You can turn it on an off as you need to test things, but it needs to be checked for your users to be able to use SSO with SmartDraw.

 

mceclip1.png


Complete the Custom SAML Configuration with Attribute Mapping

Return to the Google Admin Console and in the "Service Provider Details" section, enter the following information.

  1. Copy and paste the ACS URL from your account: https://app.smartdraw.com/sso/saml/login/[your-google-workspace-primary-domain]
    • This is the link we recommend you email your team after completing the setup
  2. Enter this under the Entity ID: https://www.smartdraw.com/
  3. Verify "Basic Information > Primary Email" is selected under Name ID.
  4. Click "NEXT".
  5. Add 3 attribute mappings.
    Primary email -> email
    First Name -> firstName
    Last Name -> lastName
  6. Click "Finish".

attribute-mapping-Google-SSO.png

Testing Your Setup

From the Google Workspace™ Admin Console

  1. Click "Apps" and "Web and mobile apps" in the left panel.
  2. Click the custom app "SmartDraw SSO" created earlier.
  3. Click the "TEST SAML LOGIN" option to test the SSO cycle.

test-SAML-Google-SSO.png

From a Web Browser

  1. Open your web browser and enter your SSO URL. This will be: https://app.smartdraw.com/sso/saml/login/[google-workspace-domain]
  2. Enter your Google login information.

google-login.png