Configuring SAML on G Suite
- To configure SAML, log in to your G Suite administrator account.
- In the Enable SSO for SAML Application page, select to SETUP MY OWN CUSTOM APP.
- In the Google IdP Information page, download the Certificate and IDP metadata. Select Next.
- In the Basic information for your Custom App page, enter an Application Name, and optionally provide a Description and Upload logo. Select Next.
- In the Service Provider Details page, set the ACS URL, Entity ID, and Start URL – these are the ACS (login) url, Entity id, and Portal url (respectively) from the FortiAuthenticator Edit SAML Portal Settings window. Select Next.
- In the Attribute Mapping page, add the FirstName, LastName, Email, and Memberof user attributes.
- Finally, make sure the application is ON for everyone, and go to your user’s Account information and make sure that Employee details show as Department. Set Department to the same FortiAuthenticator saml_users user group name.
From the Admin console,select Apps > SAML apps > Add a service/App.
The Department setting for Memberof must match the FortiAuthenticator saml_users group.
Select Finish.
