Objective :
To help a customer configure Google Admin (formerly GSuite) to use for SSO Signin on Flow
Pre-requisites :
- Customer must be on a Pro plan, which supports SSO
- Customer must have super admin access to their Google Admin (formerly GSuite)
Setup in Google Admin :
- Log into https://admin.google.com/ with super admin credentials
- From Google Admin Console, goto Apps -> Web And Mobile Apps
- In the Web And Mobile Apps screen, click on Add App -> Add Custom SAML App
- Enter App Name (required) and upload an App Icon (optional)
- Click Continue
- From Google Identity Provider Details copy SSO URL, Entity ID and SHA-256 fingerprint and download the certificate
- Click Continue
- In Service Provider Details, enter the following fields
- ACS URL : https://api.getflow.com/auth/saml/callback
- Entity ID : https://api.getflow.com
- Name ID Format : EMAIL
- Name ID : Basic Information -> Primary Email
- Click Continue
- In SAML Attribute Mapping, leave everything as default
- Click Finish
- In the app details screen, click on User Access
- In the User Access screen, click on Service Status -> ON For Everyone
- Click Save
Setup In Flow :
- Log into your Flow account https://app.getflow.com
- Click on Application Menu -> Administration -> Organization Settings
- Click on SSO tab on top, and enter the following
- Authentication URL : Same as SSO URL you had copied from Google Admin
- Certificate : Paste the contents of the certificate you had downloaded from Google Admin
- Click on Save Settings
Raise A Support Ticket :
- After you have completed the steps above, raise a support ticket and let us know that you would want to enable SSO on your account
- You can raise a support ticket by sending an email to help@getflow.com
- You can also raise a support ticket via Flow, by clicking on Application Menu -> Need Help? We’re here
