If your organisation uses Google Workspace to authenticate users, this can be incorporated into Humanforce Web. Follow the instructions below on how to configure Google Workspace and Humanforce.
- Go to the Google Workspace admin portal - https://admin.google.com and sign in using your credentials.
- From the navigation menu, navigate to Apps > Overview
- Select Web and mobile apps
- Select Add app > Add custom SAML app
- Enter an App name for your Application. Click Continue.
- Click the Download Metadata button and select a location to save the download file to.
- Navigate to your instance of Humanforce Web and login as an administrator and navigate to Admin > Security Config > SAML/SSO Admin
- Take note of the Service Provider Name and the Assertion Consumer Service Url
- Navigate back on the Google Workspace admin portal, enter the following information for the; ACS URL and Entity ID. Click Continue.
ACS URL This will be the Assertion Consumer Service Url from the previous step. Entity ID This will be the Service Provider Name from the previous step. - From the Basic Information drop down, select Primary email and in the App attributes enter Email Address. Click Add Mapping then click Finish.
- In the User access pane, select OFF for everyone
- Select the ON for everyone option and click Save.
- Navigate back in Humanforce Web navigate to Admin > Security Config > SAML/SSO Admin > Web - Identity Provider. Click the Import Metadata button and select the file that you downloaded in step 6.
- The screen should load with the message Imported & applied Successfully
- Navigate to the Settings tab and set the value for SSO Mode to Dual Mode. Click Save Changes.
- Now when loading the Humanforce Web login page there is an option to select Continue with SSO. Click this to login using your organisations SSO provider.