Configuring SAML on G Suite

To configure SAML, log in to your G Suite administrator account:

1. In the Admin console, select Apps > SAML apps > Add a service/App to your domain.

   

   

   

2. In the Enable SSO for SAML Application page, select to SETUP MY OWN CUSTOM APP.

   

3. In the Google IdP Information page, download the Certificate and IDP metadata. Select Next.

   

4. In the Basic information for your Custom App page, enter an Application Name, and, if you want, a Description and Upload logo. Select Next.

   

5. In the Service Provider Details page, set the ACS URL, Entity ID, and Start URL. These are the ACS (login) URL, Entity ID, and Portal URL from the FortiAuthenticator Edit SAML Portal Settings window. Select Next.

   

6. In the Attribute Mapping page, add the FirstName, LastName, Email, and Memberof user attributes.

   The Department setting for Memberof must match the FortiAuthenticator saml_users group.

   Select Finish.

   

7. Check that the application is ON for everyone.

   Go to your user’s Account information and ensure Employee details is Department. Set Department to the same FortiAuthenticator saml_users user group name.