Skip to main content
All CollectionsSSO and SCIM
Configuring SSO with Google Workspace
Configuring SSO with Google Workspace

Defines steps to follow in order to configure SSO for your SellerCrowd team, when using Google Workspace as your identity provider

M
Written by Marcin Wtorkowski
Updated over a month ago

With SSO (Single Sign-On), users in your organization can easily authenticate using accounts they already have within Google Workspace.

Prerequisites

To have SSO enabled for your organization a team or an enterprise plan is required (see pricing). Once in place, you can access your team account via Billing Team tab (available in Settings, alternatively using this link: https://sellercrowd.com/settings/billing-team/) where you can get following details:

  • Entity ID

  • Organisation ID

  • Assertion Consumer Service (ACS) URL

Configuration

1. Login to your Google Workspace admin console and visit https://admin.google.com/ac/apps/unified

2. Click "Add app -> Add custom SAML app" link.

3. On the first step of the Add custom SAML app wizard, fill out "App name" (can be anything, but SellerCrowd makes most sense), add description and icon if you like. Click "Continue"

4. Download metadata file and save it for later. Click "Continue" to move to the next step.

5. On this next page, fill out following fields:

  • ACS URL: Assertion Consumer Service (ACS) URL value, available at Sellercrowd's Billing Team page (see Prerequisites),

  • Entity ID: Entity Id value, available at Sellercrowd's Billing Team page (see Prerequisites),

  • Name ID format: EMAIL

  • Name ID: Basic Information > Primary email

Note: trailing slashes are important for Google to handle authentication correctly. Make sure that ACS url DOES NOT end with a slash, and your Entity ID url DOES.

6. Define attributes that will be sent over to SellerCrowd when user is authenticated. We require two to be set: First Name and Last Name (mapped to first_name and last_name attributes respectively). Click "FINISH" when ready.

7. Open Billing Team page in Sellercrowd (see Prerequisites) and click "I have the XML".

8. Copy content of file (open in editor and copy all text inside) obtained in step 4 and paste to form:
โ€‹

9. Click "Enable SSO".

Next steps

Now that your integration is configured and enabled, make sure to define user access rights (on the Google Workspace admin panel), to allow all or some of your users to actually use this integration you've just configured.
Picture below shows how the user access looks when it's ON for everyone.

SP-initiated SSO

  1. Enter your email, then click Continue.

Did this answer your question?