Setting Up a SAML Application in Google Workspace Admin for Skolon Integration
This guide provides detailed, step-by-step instructions to configure a SAML (Security Assertion Markup Language) application within your Google Workspace Admin console, preparing it for seamless integration with Skolon.
Note that these steps are also described in detail in Googles own support documentation here: https://support.google.com/a/answer/6087519?hl=en&src=supportwidget0&authuser=0#zippy=
Part 1: Configuring the SAML Application
Follow these steps to set up the core SAML application in your Google Workspace Admin console.
Log in to Your Google Workspace Admin Console
Open your web browser and navigate to the Google Workspace Admin console: admin.google.com.
Sign in using an administrator account for your Google Workspace domain.
Navigate to Web and Mobile Apps
From the Admin console Home page, locate and click on Apps.
Next, click on Web and mobile apps.
Start Creating a New SAML App
On the "Web and mobile apps" page, click the Add app button (often represented by a plus sign + in the lower right corner or a prominent button).
From the dropdown menu, select Add custom SAML app.
Name Your Application
In the "App details" section, enter Skolon as the App name.
You can optionally add a description (e.g., "SAML integration for Skolon platform") and upload an app icon if desired.
Click Continue.
Download Google Identity Provider (IdP) Metadata
On the "Google Identity Provider details" page, you will see options for "Option 1: Download IdP metadata" and "Option 2: IdP information".
Crucially, click on the "Download Metadata" button to download the XML metadata file. This file contains essential information that Skolon will need to establish the connection.
No other changes are required on this page.
Click Continue.
Configure Service Provider (SP) Details
On the "Service Provider details" page, you need to provide specific information about Skolon (the Service Provider).
Fill in the following fields precisely:
ACS URL: https://ext-idp.skolon.com/simplesaml/module.php/saml/sp/saml2-acs.php/skolon
Entity ID: https://ext-idp.skolon.com/
Leave other fields (like "Start URL," "Signed response," "Name ID format," "Name ID") as their default values unless otherwise instructed by Skolon.
Click Continue.
Map Attributes for User Identification
This step defines how user information from Google Workspace (your Identity Provider) is sent to Skolon (the Service Provider).
Click ADD MAPPING.
Under the "Google Directory Attributes" dropdown, select Primary Email. This ensures that the user's primary email address from Google Workspace is used for identification.
In the "App attribute" field, type email.
IMPORTANT NOTE: It is critical that you type email in lowercase letters, as SAML attribute names are case-sensitive.
Finalize the Application Setup
After completing the attribute mapping, click FINISH.
Your SAML application for Skolon is now configured in Google Workspace.
Part 2: Assigning the Application to Google Accounts
Once the SAML application is set up, you must assign it to the users or organizational units who will be using Skolon.
Return to Web and Mobile Apps
From the Admin console Home page, navigate back to Apps > Web and mobile apps.
Select the Skolon SAML App
Locate and click on the Skolon SAML application from the list.
Manage User Access
On the app's details page, click on User access.
Here, you can control which users or organizational units have access to the Skolon application.
To enable the service for everyone in your organization, click On for everyone.
Alternatively, you can select specific organizational units or groups to grant access.
Click Save to apply your changes.
Part 3: Sending Metadata to Skolon
Email the Metadata File
Locate the XML metadata file you downloaded in Step 5 of Part 1.
Email this file to your contact person at Skolon who is responsible for your technical setup. They will use this file to complete the integration on their end.
Troubleshooting
If you encounter any issues after the login is configured and activated, please refer to Google's official SAML troubleshooting guide for Google Workspace:
Google's SAML Troubleshooting Guide: https://support.google.com/a/answer/6301076?hl=en
We hope this updated guide helps you successfully set up your SAML application for Skolon. If you have further questions or require assistance, please contact Skolon Support.