SSO (Google SAML)

Purpose

SSO allows a client to manage users in an external authentication provider and use those credentials to access Digital Fleet, allowing the users to log into the authentication provider once and then have access to multiple applications without additional logins. Our implementation supports using Google as a SAML 2.0 based authentication provider.

Process Overview

• Digital Fleet Support will create the SSO provider in the clients Digital Fleet account and provide them with the Digital Fleet Entity ID and ACS URL.
• The client will create the SAML app in Google with the provided Digital Fleet Entity ID  and ACS URL.
• Digital Fleet Support will update the Digital Fleet SSO provider configuration with the Google SAML app information provided by the client.

Setting up Google SAML

1.  Contact [e-mail] to enable SSO for Google SAML

2.  Client to create the Google SAML app for Digital Fleet

• The client needs to access admin.google.com → Apps → Web and mobile apps
• Add a new app (Add custom SAML app)
• Enter an App Name
• Copy or download the SSO URL which is the provider endpoint and the Certificate for the Digital Fleet configuration and provide this information to Digital Fleet support.
• On the next page, the client sets the ACS URL and Entity ID provided by Digital Fleet (These are case sensitive)
• Client updates the User access to be enabled for the appropriate set of users.
  • On creation of the SAML app, it defaults to "Off for everyone".  The admin has the ability to turn it "On for everyone", or on for certain groups configured within Google.

3.  Digital Fleet support will Update the Digital Fleet SSO Provider