Create the Cheqroom application in Google
Add custom SAML app
Type name of the application (f.e Cheqroom)
App icon
Right click to download
Click Continue
Click Continue
Enter Cheqroom metadata details
ACS URL
Here you need to paste the Single sign on url value. Please see Get Cheqroom Metadata to enter in Google for more informationEntity ID
Here you need to paste the Audience URI (Entity ID) value. Please see Get Cheqroom Metadata to enter in Google for more informationClick Continue
Click Add Mapping
Select Primary Email for Basic information
Enter email as App attribute
Repeat if you also want to add other attribute f.e first name, last name, etc…
Click Finish
Click OFF for everyone to configure which users can have access to the Cheqroom application
User access
Here you need to decide if you want to allow everyone access to the Cheqroom application or only a specific group of users
⚠️ Please note that it can take up to 24 hours before all users are allowed to login with SSO. These changes are managed by Google and not something Cheqroom can change.
Get Cheqroom Metadata to enter in Google
Log in to your Cheqroom account
Go to Settings > Authentication
Enable or edit SSO configuration:
If you haven’t enabled your SSO configuration already, click the Enable SAML SSO toggle
If SAML SSO is already enabled, click Edit SSO Configuration
The Cheqroom metadata section provides all required information you need to enter in Google
Get Google Metadata to upload in Cheqroom
Login in to your Google account
Go to Apps > Web and mobile apps > Cheqroom
Click Download Metadata
Enable SSO in Cheqroom
Log in to your Cheqroom account
Go to Settings > Authentication
Click Enable SAML SSO toggle
Choose Google as SAML Identity Provider
Cheqroom Metadata is needed to setup a Cheqroom application in Google, see Create Cheqroom application in Google
Upload metadata of Google, see Get Google Metadata to upload in Cheqroom
Click Next to go to the Settings configuration step
Roles configuration
Choose a Default role, this will be assigned to a user who logs in through Google but has no assigned role. Here we recommend using a role that hasn't got a lot of permissions (for example the Equipment Viewer role)
Choose how user roles are managed, this lets you choose if you want to manage the roles from Google or keep the role management in Cheqroom. See Configure how roles are managed for SSO for more information.
User groups configuration This option is only available if you have created some user groups for your account, see Create User Groups
Choose a Default user group
Choose how user groups are managed, see Configure how user groups are managed for SSO
Click Next to go the the Attribute mappings step
See Configure SSO attribute mapping for configuring attribute mapping
Click Next to go the the Test connection step
See Test SSO connection
Add custom attributes in Google
Log in to your Google account
Go to Directory > Users
Click More and then choose Manage custom attributes
Click Add custom attribute
Add custom attribute
For Category, we suggest that you fill in Cheqroom, this will allow you to have a clear overview of all custom attributes that are specifically added for the Cheqroom SAML application.
Next, enter the following information for the Role/User Group attribute:
Name: f.e Role
Info type: Text
Visibility: Visible to user and admin
Number of values: Single value
Click Add
Configure User Roles in Google
Log in to your Google account
Prerequisites:
You should have a custom Role attribute, see Add custom attribute in Google
Go to Directory > Users
Go to the user details of a user you want to specify a role for in the Cheqroom application
Click the User information section
Find the Role attribute in Cheqroom section and click Add Role
Paste the role value we want to assign, f.e. super_admin See Configure how roles are managed for SSO to get role value
Click Save
Optional if you haven’t configured the Cheqroom application yet to return cheqroom__role saml attribute
Go to Apps > Web and mobile apps > Cheqroom
Click the SAML attribute mapping section
Click Add mapping
Add Mapping:
Basic information: Role
App attributes: cheqroom__role
Click Save
Configure User Groups in Google
Log in to your Google account
Prerequisites:
You should have a custom User Group(s) attribute, see Add custom attribute in Google
Use Multi-value if you want to assign multiple user groups in Google
Go to Directory > Users
Go to the user details of a user you want to user group(s) for in the Cheqroom application
Click the User information section
Find the User Group attribute in Cheqroom section and click Add User Group(s)
Paste the user group values you want to assign, f.e. 2pUxarjneB8Jh3DDSKABTD ****See Configure how User Groups are managed for SSO to get user group values
Click Save
Optional if you haven’t configured Cheqroom application yet to return cheqroom__user_group saml attribute
Go to Apps > Web and mobile apps > Cheqroom
Click the SAML attribute mapping section
Click Add mapping
Add Mapping:
Cheqroom: User Group(s)
App attributes: cheqroom__user_group
Click Save