Exercise 7: Configure SSO in third-party applications

Exercise directions

Step 1

If you’re not already signed in, sign in to your domain as the Administrator at admin.google.com.

Step 2

From the main menu, navigate to Apps, then click Web and mobile apps.

Step 3

From the header of the Apps table, click Add app, and select Search for apps.

Step 4

Search for the 15Five Web (SAML) app, hover over the row with the app, and click the Select button.

You will now walk through the 15Five wizard. Notice how the first page populates with the SSO URL and the Entity ID URL together with the certificate file that you saw in Step 2. You will need to copy the URLs and download the certificate, as these must be added to the SP's configuration later to complete the process. We won't do that here however, as the intention of this exercise is to allow you to become familiar with the process only.

Step 5

Click the DOWNLOAD METADATA button, and open it in a text editor.

Step 6

Click CONTINUE.

Step 7

Replace {your-domain} with your Google Workspace domain name in the ACS URL, Entity ID, and Start URL fields.

Step 8

Click CONTINUE, then click FINISH. This will take you to the 15Five service settings.

Step 9

Return to the Web and mobile apps list and you will see 15Five in the list. It should be OFF for everyone.

Please refer to the instructions specific to this application to complete the setup process. These instructions can be found in the Learn more link and will vary from app to app but are typically:

• Setup the app as the SP: Sign into the application console, upload the Google certificate, and complete the Entity ID and SSO URL values.

• Enable the app in the Google Workspace Admin console.

• Verify SSO is working: Attempt to log into the application. You should be redirected to the Google Workspace sign in page. After your credentials are authenticated, you are redirected back to the application.