Creating the Custom SAML App
In the Google Workspaces dashboard, Select the Web and mobile apps tile.
In the Web and mobile apps section, click the Add App menu button, then select the Add Custom SAML App menu item.
Step 1: App Details
On the App Details screen, enter Emtrain in the App Name text field. Upload the provided logo image in the App Icon field. Click the Continue Button.
Step 2: Google Identity Provider Details
On the Google Identity Provider Details page, copy/download the Certificate and SSO URL/Entity ID URL. Click the Continue button once you have saved these details.
Step 3: Service Provider Details
On the Service Provider Details page, enter the following data into the corresponding text fields.
ACS URL: https://api.gaviti.com/v2/auth/sso/callbackUrl?securityPolicyId=EXAMPLE (you'll receive the exact URL from Gaviti support)
Entity ID: gaviti
Name ID format: EMAIL
Once you have filled in the 3 fields, click the Continue button.
Step 4: Attribute Mapping
No need to setup mapping. Click on the Finish button
Enabling SSO in your Gaviti Account
Enabling the Google SSO application in your Gaviti account consists of creating an SSO Entry Point URL, and sending the SSO entry point URL and the Certificate provided by Google to Gaviti support team.
Creating the SSO Entry Point URL
The SSO Entry Point URL is a URL that your users will be directed to when they visit your Gaviti account page. Unlike most identity providers, Google does not provide an easily accessible URL for this when creating the custom SAML application, so you must construct it.
Isolate the idpid from the SSO URL/Entity ID URL provided by Google. If you did not copy it down at the beginning of this process, it can be found by clicking the Download Metadata button. The idpid is the alphanumeric text located after
idpid="in the Google Entity ID or SSO URL. It is shown in the modified screenshot below as 123456789:
Isolate the spid. This is the identifier of your custom SAML app, and can be found in the URL of the custom SAML app's overview page, after /apps/saml. It is shown in the modified screenshot below as 987654321:
Create the SSO Entry Point URL by replacing the idpid and spid shown below with the idpid and spid specific to your account:
https://accounts.google.com/o/saml2/initsso?idpid=123456789&spid=987654321