Set up SSO for Plecto and Google
Step 1: Enable SSO in Plecto
-
Go to Settings.
-
Find the Single Sign-On section and click Enable SSO. You will see an ACS URL and an EntityID, which you'll have to use shortly. Keep this tab open.
-
In a separate browser tab, open Google Admin Console and move to Step 2.
Step 2: Configure Google Admin Console
-
Go to Security > Authentication > SSO with Google as SAML IdP and make sure you have a certificate you can use. Otherwise, click Add certificate to add a new certificate.
-
Next, navigate to Apps > Web and mobile apps, then click Add App > Add custom SAML app.
-
Fill out the app details, then click Continue.
-
Fill out the required service provider details:
-
ACS URL and Entity ID: Open your Plecto tab and copy both URLs from Plecto to the required fields in Google. Both URLs have to start with https://
-
Name ID format: EMAIL
-
Name ID: Basic information > Primary email
-
-
Click Continue.
-
Don't add any Attributes.
-
Click Finish.
-
Keep this tab open. Now you have two tabs open – one from Plecto and the other from Google. Move to Step 3.
Step 3: Finish setting up SSO in Plecto
In the Plecto browser tab, fill out the following details:
-
Provide SAML settings: Manually
-
SAML login URL: Insert the SAML URL from the Plecto app in your Google Admin Console.
-
SAML certificate: Insert the SAML certificate from the Plecto app in your Google Admin Console.
-
(Optional) Allow SAML provisioning: If enabled, employees with access to SSO will automatically be created when trying to log in to Plecto.
-
Click Save in the bottom-right corner to finish.
For more help, read Google's help article: Set up your own custom SAML application