How to configure Google Workspace SSO in Supermetrics

This guide explains how to configure your Google Workspace account to enable single sign-on (SSO) for Supermetrics using SAML 2.0. This allows your team members to access Supermetrics with their Google Workspace credentials.

For more information, see also Google Workspace Admin Help about setting your own custom SAML app.

Before you begin

Before you can configure your Google Workspace for logging in to Supermetrics, you need the following:

• A Google Workspace administrator account with the necessary permissions to manage SAML apps.
• Supermetrics SAML configuration details (you can get these details by contacting Supermetrics support):
  • Assertion Consumer Service URL (ACS URL): The URL where Google Workspace will send the SAML assertion.
  • Entity ID: Unique identifier for Supermetrics as a service provider. 

    Important: Treat the entity ID value as-is and do not change it (such as by adding trailing slashes). While the entity ID looks like a URL, it's a URI and must not be modified.

  • Start URL: The URL where users will be redirected after successful authentication.

Instructions

Step 1: Create a new SAML application in Google Workspace

1. Go to the Google Admin console and log in with your administrator account.
2. In the left navigation pane, go to Apps → Web and mobile apps.
3. Click Add app and select Add custom SAML app.
4. Configure the SAML app:
   1. App name: Enter a descriptive name for the Supermetrics application (such as "Supermetrics").
   2. ACS URL: Enter the ACS URL provided by Supermetrics.
   3. Entity ID: Enter the Entity ID provided by Supermetrics.
   4. Start URL: Enter the Start URL provided by Supermetrics.
   5. Name ID format: Select EMAIL.
   6. Name ID: Select "Primary email".
5. Click Save to complete the configuration of the Supermetrics SAML app.

Step 2: Assign users to the new app

Once configured, you can either grant access to all users or specific groups.

To add users, navigate back to Apps → Web and mobile apps and select the newly configured "Supermetrics" app. From here, you can assign users or user groups to access Supermetrics using their Google credentials.

Step 3: Share SAML metadata with Supermetrics

On the Supermetrics app page, click Download metadata to download the metadata file, and share the metadata file with Supermetrics.

Step 4: Test the integration

After Supermetrics confirms that your metadata file has been received and processed, you can test the integration.

1. Have a user go to the Supermetrics Hub. The user should be redirected to the Google sign-in page, where they can authenticate using their Google Workspace credentials. After successful authentication, the user should be redirected to Supermetrics.
2. Once the user is logged in to Supermetrics, verify that the user in the top-right corner of the Supermetrics Hub matches their selected Google identity.