Skip to main content

Our help center

Enable SSO with Google Workspace

This article is intended for administrators.

Elevo allows you to use your Google Workspace login to connect. To do this, you'll need to do a little configuration on both sides (Elevo and Google Workspace).

☝️ Enable SAML integration for your Elevo space

First, contact our support@elevo.io who will provide you with the following information:

  • ACS Dedicated URL

⚙️ Add Elevo as a SAML Application

1️⃣ Log in to your Google Workspace admin console and select “Web and mobiles apps”

Capture_d_e_cran_2023-03-07_a__14.01.14.png

2️⃣ Click on "Add app", then "Add custom SAML app" in the drop-down menu

Capture_d_e_cran_2023-03-07_a__14.01.51.png

3️⃣ A window will open, indicate the elements below in the corresponding fields then go to the next step by clicking on "Continue".

  • App name : Elevo
  • Description : Elevo – People Management Platform
  • Upload Logo : Download Elevo's logo

Capture_d_e_cran_2023-03-07_a__14.02.26.png

4️⃣ Here choose option 1 "Download IdP metadata" by clicking on the "Download Metadata" button. This will download a file "GoogleIDPMetadata-youdomain.xml" that you will have to send us. Then click on the "Continue" button.
Capture_d_e_cran_2023-03-07_a__14.02.41.png

5️⃣ Fill in the following fields:

  • ACS URL: The URL we have provided to you
  • Entity ID : https://app.elevo.fr/sp
  • Name ID Format : EMAIL
  • Name ID : Basic information > Primary email

Then click on the "Continue" button

Capture_d_e_cran_2023-03-07_a__14.03.42.png

6️⃣ There is nothing to fill in at this time, you can click on "Finish".

Capture_d_e_cran_2023-03-07_a__14.03.52.png

📥 Activate the new SAML application for all

Now that your SSO configuration is in place you need to activate the application for all your users.

Go to "Apps" then "Web and mobile apps", select the Elevo App you just created, click on "Expand user access".

Capture_d_e_cran_2023-03-07_a__14.06.27.png

Make sure here that the application is activated for everyone "ON for everyone".

Capture_d_e_cran_2023-03-07_a__14.06.40.png

This will show up as below in your Apps list once it is properly set up.

Capture_d_e_cran_2023-03-07_a__14.06.02.png

💾 Upload iDP metadata to Elevo

Contact us directly via support@elevo.io to upload the "GoogleIDPMetadata-youdomain.xml" file you downloaded earlier.

Your environment is now set up and SSO authentication is ready to use on Elevo.

However, if you encounter any problems during this process, please contact us directly at support@elevo.io so that we can assist you.

🔗 Frequently encountered errors with the Google Workspace SSO connection

403. That's an error - Error: app_not_configured_for_user

image__4_.png

This error means that the user did not use the right Google account in order to log in. This can happen when the user has several mails with different domain names.

Example → exemple@truc.com VS exemple@truc-group.com 

Error: malformed_certificate

Capture_d_e_cran_2023-03-06_a__10.29.05.png

This error indicates that the certificate for setting up the SSO connection has expired.

  • If you are a user, contact your HR team.
  • If you are an Elevo Administrator, contact Elevo Support.

Sample message to send to your HR team or Elevo Support:

Hello,

As a user ➡️ The SSO certificate for Elevo login appears to have expired. Can you take care of updating it ?

As an admin ➡️ The SSO certificate for Elevo login appears to have expired. Can you send us the ACS Dedicated URL ?