Integrate with Google Single Sign-On (SSO)

Administrators can set up single sign-on with Google.

This is a four-step process:

1. Create a new service account within the Google API Console.
2. Enable domain-wide delegation to the new service account.
3. Install the JSON file in Facilities Binders.
4. Import Google users into Facilities Binders via Google Groups.

Step 1: Create a new service account

1. Go to the Google API Console.
2. Create a service account.

Step 2: Enable domain-wide delegation to the service account

1. Open a new browser window.
2. Control API access with domain-wide delegation.

Step 3: Install the JSON file in Facilities Binders

1. In Facilities Binders, select Settings > Single Sign On > Google SSO Admin. The Google SSO Administration page appears.

   

2. Next to Administrator Email Address, enter the email address for the Google domain super administrator.

   Note: Administrator Email Address should be the same domain Administrator Email Address that enabled the domain-wide delegation. This email address will impersonate the service account.

3. Under Service Account File, upload the JSON file that was downloaded in Step 2.

   Note: This is the JSON Service Account file that was downloaded from the Google developer console. Save and then perform the test to check the validity of the service account credentials.

4. If you want to Auto Sync Google Users, select the checkbox.
5. Click Save.

Step 4: Import Google users into Facilities Binders via Google Groups

1. In Facilities Binders, select Settings > Single Sign On > Google SSO Groups. The Manage Google SSO Groups page appears.

   

2. Click +Add Google SSO Group. A pop-up appears.

   

3. Do any of the following:
   a.  Enter a Group Name and Group Email Address.

   Note: Group Email Address is required to sync users. Click View Google Users before you save and sync users.

4. Do one of the following:

   • To create a new group, select 1 Group Per User. Then select a Classification.
   • To add users to a group, select Add to Existing Group. Then select the desired group.

5. Select the default role(s) you want the users to have.
6. Select the default site(s) you want the users to have access to.

7. To activate the group, select the Active checkbox.

   Note: Only active groups are synced nightly.

8.  Click Save and Sync Users.
9. Repeat steps b-d for any additional Google groups you want.