All Collections
Technical Specifications
Configure Single Sign-On with G Suite
Configure Single Sign-On with G Suite

(Google Apps)

Vipula avatar
Written by Vipula
Updated over a week ago

Before following the steps below to configure single sign-on using G Suite, please read Single Sign-On overview for more general information regarding Qualee's single sign-on.

1. Enable single sign-on in Qualee

  1. Click on Advanced in the left menu of the Console

  2. Choose Single Sign-On located in the Security & safety section

On this view you will input your SSO login URL and certificate provided by G Suite. You will also find the entity ID and reply URL (ACS) for Qualee, which you will enter into G Suite a later step.

2. Add the Qualee app to your G Suite account

As a G Suite administrator, you can follow these steps to add a new SAML app for your company, by first going to admin.google.com, and clicking the Apps box in the grid of icons:

1_admin_console_copy.png

Then click the SAML apps box to view your collection of existing SAML apps, or to create a new one:

2_apps_copy.png

Create a new SAML app by clicking the plus (+) button in the bottom right:
โ€‹

3_saml_apps_copy.png

For Qualee, you can setup a custom SAML app. Click Setup my own custom app:
โ€‹

4_add_saml_app_copy.png

On the next page download the certificate and make note of the SSO URL. The certificate and SSO URL should then be added to the Qualee Single Sign-On settings page, as shown at the beginning of this article. Be sure to copy this information now, as it will not be available once this guide has been completed. After entering this information into Qualee, click Next:

5_idp_info_copy__1_.png

You can now add a name and description for your new app, and upload a logo. Here is a logo image you can use. Right-click and save as to your computer:

Then click Next:

6_app_info_copy.png

On the following page, configure your new SAML app with the ACS and Entity ID provided on the Qualee Single Sign-On settings page. Make sure to check the Signed Response box, and set Name ID to the primary email of the user, and Name ID Format to EMAIL. Then click Next:

7_sp_details_copy__1_.png

Details on the Attribute Mapping page are optional and you can click Next.

8_attribute_mapping_copy.png

Your newly created Qualee app should appear under the SAML apps section. Remember to turn the app on for some or all the users in your organisation once it has been created, or they will not be able to log in.

3. Test that single sign-on is working

Now that G Suite is configured to integrate with Qualee, you can test it:

  1. Go to console.qualee.com/login and click Log in with SSO, enter your G Suite email address.

  2. After entering the email, Qualee will detect that this email supports single sign-on and clicking the Log in button will redirect you to Google's sign in page, before redirecting you back to Qualee and logging you in.

  3. If you prefer to sign into Qualee using your existing password, you can use the standard login fields on the login page.

  4. Optionally, bookmark console.qualee.com/saml/{your email domain}, which will start the single sign-on flow directly without having to visit the Qualee login page first.

Troubleshooting

Issue: Qualee will not log in after redirecting back from the Google sign in page

Solution: Re-check that the domain of your Qualee email is the same as the one in G Suite, as this is how Qualee finds the correct user to authorise.

Issue: When logging in I get an error page saying "Service is not configured for this user".

Solution: In Google you need to enable the Qualee application for everyone in your organisation under the "Qualee settings" > "Service Status", and select "ON for everyone". This setting may take up to 24 hours to be applied, so you may still see the error immediately after turning enabling.

Did this answer your question?