G Suite - SAML Integration

Use these instructions to configure your Google Business Apps with WhosOffice for single sign on.

If you require any assistance with this setup please contact support@whosoffice.com

Pre-requisites

• You will need an administrator account to access the Google Admin Console
• You need to have an existing account with WhosOffice
• You will need an Administrator role on WhosOffice to complete these steps

1. Identify your sub-domain from WhosOffice

1. Login to your WhosOffice account
2. From the Settings menu, go to Company
3. Make a note of your sub-domain from this page, it will be in bold as shown below.

2. Configure your Google account

1. Login to your Google admin console
2. From the Home page, go to Apps, then click on SAML apps
   
3. Click on the + bottom right
4. Locate and click "WhosOffice" in the application list

3. Configure Google IdP Information

1. On the Google IdP information page, download the "IDP metadata" file to a location on your computer (remember this for later)
   
2. Click Next
3. On the Service Provider details page, provide the following information:

1. Edit the ACS URL by replacing {sub-domain} with your company's dedicated sub-domain provided by WhosOffice, see step 1 above.
2. Ensure the entity ID is whosoffice
3. Ensure the Name ID values are
   1. Basic Information
   2. Primary Email
4. Click on Next & Finish
   

4. Configure your WhosOffice account

1. Login to your WhosOffice account
2. From the Settings menu, go to Company
   
3. Click on the "Single Sign On" tab
   
4. Select "Google" from the provider drop down and click on "Activate Login Provider"
5. Using the form, browse to the IdP metadata file you downloaded in step 3, click on Upload
   
6. Click on Save Changes
   Note: If you would like to force users to Authenticate through Google (for online logins only), make sure "Force SAML" is selected as "Yes" then click on "Save Changes".

5. Enable WhosOffice SAML connector

1. Login to your Google admin console
2. From the Home page, go to Apps, then click on SAML apps
3. Select WhosOffice
4. At the top right of the grey box, click Edit Service
5. Ensure that your WhosOffice user account email addresses match those in your Google domain

6. Verify that SSO is working

1. Navigate to https://{sub-domain}.my.whosoffice.com
   Remember to replace {sub-domain} with your company's dedicated sub-domain from Step 1.
2. If you have chosen to "Force SAML" you will automatically be redirected to the Google sign-in page
3. If you have chosen NOT to "Force SAML" you will see the WhosOffice login screen with an option to login through Google.
   
4. After you have authenticated your login with Google you will be redirected to your WhosOffice account.