With SSO (Single Sign-On), users in your organization can easily authenticate using accounts they already have within Google Workspace.
Prerequisites
To have SSO enabled for your organization a team or an enterprise plan is required (see pricing). Once in place, you can access your team account via Billing Team tab (available in Settings, alternatively using this link: https://sellercrowd.com/settings/billing-team/) where you can get following details:
Configuration
1. Login to your Google Workspace admin console and visit https://admin.google.com/ac/apps/unified
2. Click "Add app -> Add custom SAML app" link.
3. On the first step of the Add custom SAML app wizard, fill out "App name" (can be anything, but SellerCrowd makes most sense), add description and icon if you like. Click "Continue"
4. Download metadata file and save it for later. Click "Continue" to move to the next step.
5. On this next page, fill out following fields:
ACS URL: Assertion Consumer Service (ACS) URL value, available at Sellercrowd's Billing Team page (see Prerequisites),
Entity ID: Entity Id value, available at Sellercrowd's Billing Team page (see Prerequisites),
Start URL: https://sellercrowd.com/login/sso
Name ID format: EMAIL
Name ID: Basic Information > Primary email
Note: trailing slashes are important for Google to handle authentication correctly. Make sure that ACS url DOES NOT end with a slash, and your Entity ID url DOES.
6. Define attributes that will be sent over to SellerCrowd when user is authenticated. We require two to be set: First Name and Last Name (mapped to first_name and last_name attributes respectively). Click "FINISH" when ready.
7. Open Billing Team page in Sellercrowd (see Prerequisites) and click "I have the XML".
8. Copy content of file (open in editor and copy all text inside) obtained in step 4 and paste to form:
โ
9. Click "Enable SSO".
Next steps
Now that your integration is configured and enabled, make sure to define user access rights (on the Google Workspace admin panel), to allow all or some of your users to actually use this integration you've just configured.
Picture below shows how the user access looks when it's ON for everyone.
SP-initiated SSO
Enter your email, then click Continue.