Single Sign-On with Google Workspace

This guide demonstrates how to configure single sign-on with Google Workspace.

Google Workspace configuration

Log into your Google Workspace Admin Console.

Add SAML app

1. Open navigation panel, Apps > Web and mobile apps
2. Click the Add app dropdown at the top of the main page area
3. Click Add custom SAML app

App details

1. In the field App name enter Deskradar
2. In the field Description enter Interactive Floor Plans
3. Upload Deskradar logo into the field Upload logo
4. Click Continue

Google identity provider information

1. Copy the contents of the fields SSO URL and Entity ID. You will need them later.
2. Download the certificate
3. Click Continue

Service provider details

Fill the form with the following information.

• ASC URL (Assertion Consumer Service): https://YOUR_DOMAIN.deskradar.cloud/auth/sso/saml/consume Replace YOUR_DOMAIN with your Deskradar instance domain.
• Entity ID: https://YOUR_DOMAIN.deskradar.cloud
• Start URL: leave empty
• Signed Response: check this box
• Name ID: Select Basic Information and Primary Email
• Name ID Format: Leave UNSPECIFIED selected

Click Next

Attribute mapping

Click the Add mapping button to add 3 mappings:

Application attribute	Category	User field
Email	Basic Information	Primary Email
FirstName	Basic Information	First Name
LastName	Basic Information	Last Name

Click Finish

Enable service

1. Click on the box User access at the top of the page
2. In the Service status box select ON for everyone

Deskradar configuration

1. Open Team panel by clicking the icon in the Sidebar.
2. Switch to Single Sign-On tab.
3. Enable SAML authentication method.
4. In the fields enter the information obtained from Google IdP Information.
   • SAML SSO URL: Use SSO URL
   • Identity Provider Issuer: Use Entity ID
   • Public Certificate: Use the downloaded certificate

Sign in to Deskradar with SSO

After configuration is complete users can sign in to Deskradar.

Sign in from Deskradar

• Launch your Deskradar instance by opening URL in your browser: https://YOUR_DOMAIN.deskradar.cloud Replace YOUR_DOMAIN with your Deskradar instance domain.

• Click on “Enterprise Single Sign-On” button on the login view:

• You will be signed in to Deskradar directly, if you’re already signed in with connected domain on Google.

• You will be redirected to Sign In form on Google, if you’re not signed in yet. You can enter your credentials there to sign in to your connected Google domain.

• You will be taken back to Deskradar and signed in to Deskradar upon successful sign in with your Google credentials on connected domain.

Sign in from Google App

Launch Google Workspace application (e.g. Gmail) and sign in with your domain credentials.

• Click the Apps icon
• Click Deskradar icon