Skip to main content

Google Workspace

Configure Google Workspace as the Single Sign-On provider for your organization on the Akuity Platform.

Configuring Google Workspace SSO

info

Akuity Platform SSO is available on Enterprise plans only. Please contact our Sales Team to access the feature.

The owner role on the Organization is required to configure SSO.

  1. Go to Organization > SSO.

    SSO Settings

  2. Click Add Configuration.

  1. Register an application to the Google Workspace with the following settings:

    • Authorized JavaScript origins to https://auth.akuity.io
    • Set Redirect URI to https://auth.akuity.io/login/callback
  2. Populate the configuration details inside the form:

    • Client ID: Application (client) ID
    • Client Secret: Client Secret
    • Google Workspace Domain: Google Workspace domain name for your organization.
    • Domain Aliases: Additional domains to match organization members (e.g. some-org.com).
    • Auto Add Member: Allow your organization members to join your organization with the member role automatically.
note

For security purposes, your domain and domain aliases will be submitted to Akuity for manual review and approval.

Google Workspace SSO Settings

  1. Test the connection.

IDP Groups Mapping

caution

IDP Groups does not work for Okta native integration as Okta does not support groups claim. Please use generic SAML/OIDC option instead to connect with Okta if you want to use this feature.

To configure IDP Groups for an Organization in the Akuity Platform:

  1. Go to Organization > SSO.

    OIDC SSO Settings

  2. Click Add New Rule.

    Add New Rule

  3. In the Add OIDC Group Mapping select the role and specify the corresponding OIDC Group for your provider.

    Add OIDC Group Mapping

  4. Click the Add button.

note

In the SSO settings, if the Auto Add Member is checked the new user will join your organization with the member role automatically.

Auto Add Member

OIDC Team Mapping

caution

OIDC Team Mapping does not work for Okta native integration as Okta does not support groups claim. Please use generic SAML/OIDC option instead to connect with Okta if you want to use this feature.

This feature allows you to map users with a specific OIDC group to a team in your organization.

Your organization must have at least one Team.

To configure this feature for an Organization in the Akuity Platform:

  1. Go to Organization > SSO.

    OIDC SSO Settings

  2. Scroll down to the "OIDC Team Mapping" section and click Add New Mapping.

    Add New Rule

  3. In the modal that appears, specify an OIDC group and select an existing team from the dropdown.

    Add IDP Team Mapping

  4. Click the Add button.

Now, when a user logs in with the specified IDP group, they will be added to the selected team in your organization.