Who can set up SSO with Google Cloud
This can be done by an Admin or an IT person in your company.
How to set up SSO with Google Cloud
Create application
1. Login to the Google admin panel and click “Add app” > “Add custom SAML app”
2. Provide an app name (Moss) and click "Continue"
Configure Moss
We need to copy two URLs from the Google panel into the Moss settings page. The certificate is used to check the SAML request validity.
Copy the following URLs (SSO URL and Entity ID) and download the certificate.
Open Moss > Click on “Settings” > “SAML SSO”
Paste the URLs and upload the certificate to Moss
Enable the “SAML SSO” toggle button at the top .
Configure Google
By copying those following parameters Google can check if the expected service is going to use identity service and you can check if it works.
Open Moss > Click “Settings” > “SAML SSO”
Copy the parameters “SP entity ID” and “SP ACS URL” into Google
User attributes
In the next step we need to ensure needed user attributes are exposed to Moss the app.
1. Select the following mapping:
Needed to match user to Moss account
Needed for card creation
(OPTIONAL) for 3DS feature
2. Click “Save”
Assign users
Finally, we need to specify what users / user groups are allowed to login to the Moss app.
Edit the section and select “User Access” and turn it on for everyone or select a subset or group