Set up SSO with Google

Written by Анатолій

Updated 4 days ago

Single Sign-On (SSO) Providers

Single Sign-On (SSO) is an authentication method that allows users to securely log in to different applications, platforms or websites using only one set of credentials

Single sign-on (SSO) works based on a trust relationship between an application known as a service provider and an identity provider (IdP), such as Google, Okta, OneLogin, Microsoft AD FS, etc.
This trust relationship is often based on a certificate exchanged between the identity provider and the service provider

Benefits of Using SSO:

Users can authenticate using their existing credentials without repeatedly entering them for different applications.
Your existing IdP remains the system of record for user authentication.
You do not need to synchronise passwords with your IdP provider.

In WhiteDoc, you can set up Single Sign-On, allowing employees to access the platform through their Identity Provider (IdP), which streamlines the login process by eliminating passwords for secure and fast access.

WhiteDoc's SSO system is based on Security Assertion Markup Language 2.0 (SAML 2.0). SAML is designed to enable single sign-on for web applications across different domains, and SAML 2.0 is the leading industry standard for exchanging authentication and authorisation data.

In the SSO Providers tab, you can add your SSO providers to configure SSO authentication for your corporate users. To create an SSO provider, click the corresponding button and complete the fields in the modal window:

You can choose the type of metadata to use (either URL or XML). Once all the information is filled out, click ‘Add’.

Providers added this way can be edited or deleted, with deletion requiring confirmation:

Setting Up SSO with Google

To initiate the setup, log in to admin.google.com using an administrator account for Google services, such as Google Workspace or Cloud Identity:

Next, navigate to Applications -> Mobile and Web Applications from the menu:

If this is your first time setting up SSO, you will not see the SAML application in your list; you will need to select ‘Add’ > ‘Add custom SAML application’:

In the form that opens, specify the name of the new application, attach an icon if needed, and click ‘Continue’:

Google will provide connection data in two options; we recommend using ‘Upload metadata’ in one file and then clicking ‘Continue’ to proceed with the settings:

In the next window, fill in the connection data for the WhiteDoc platform:

ACS URL = https://api.whitedoc.ua/saml/SSO
Entity ID = https://api.whitedoc.ua/saml/metadata

Also, select the name identifier (which in our case is an email), then click ‘Continue’ to proceed with the setup:

For WhiteDoc, the required attributes are First Name and Last Name, so you will need to ensure these attributes are provided:

Once you have completed the settings on the Google side as an Identity Provider (IdP), the application should appear in the list of Mobile and Web Apps. You can access the app to view its settings:

To complete the settings on the WhiteDoc side when creating an SSO provider, you need to select the metadata type ‘XML’, copy and paste the content from the previously uploaded Google metadata file (the file is available in the application settings) and click the ‘Add’ button:

SSO provider is successfully created:

Don't forget to enable access for your users on the Google side

Did this answer your question?