Skip to main content
Configuring SSO with Google
Franz Prowant avatar
Written by Franz Prowant
Updated over 2 weeks ago

Create the Cheqroom application in Google

  • Log in to your Google account

  • Go to Apps > Web and mobile apps

  • Click Add app > Add custom SAML app

  • Add custom SAML app

    • Type name of the application (f.e Cheqroom)

    • App icon

      Right click to download

    • Click Continue

    • Click Continue

    • Enter Cheqroom metadata details

    • Click Add Mapping

      • Select Primary Email for Basic information

      • Enter email as App attribute

      Repeat if you also want to add other attribute f.e first name, last name, etc…

    • Click Finish

  • Click OFF for everyone to configure which users can have access to the Cheqroom application

  • User access

    Here you need to decide if you want to allow everyone access to the Cheqroom application or only a specific group of users

    • If you want to allow access to everyone, choose ON for everyone and click Save

    • If you only want a specific group of users to have access, you can choose a specific group and only allow them access

⚠️ Please note that it can take up to 24 hours before all users are allowed to login with SSO. These changes are managed by Google and not something Cheqroom can change.


Get Cheqroom Metadata to enter in Google

  • Log in to your Cheqroom account

  • Go to Settings > Authentication

  • Enable or edit SSO configuration:

    • If you haven’t enabled your SSO configuration already, click the Enable SAML SSO toggle

    • If SAML SSO is already enabled, click Edit SSO Configuration

  • The Cheqroom metadata section provides all required information you need to enter in Google


Get Google Metadata to upload in Cheqroom

  • Login in to your Google account

  • Go to Apps > Web and mobile apps > Cheqroom

  • Click Download Metadata


Enable SSO in Cheqroom

  • Log in to your Cheqroom account

  • Go to Settings > Authentication

  • Click Enable SAML SSO toggle

  • Choose Google as SAML Identity Provider

  • Cheqroom Metadata is needed to setup a Cheqroom application in Google, see Create Cheqroom application in Google

  • Upload metadata of Google, see Get Google Metadata to upload in Cheqroom

  • Click Next to go to the Settings configuration step

  • Roles configuration

    • Choose a Default role, this will be assigned to a user who logs in through Google but has no assigned role. Here we recommend using a role that hasn't got a lot of permissions (for example the Equipment Viewer role)

    • Choose how user roles are managed, this lets you choose if you want to manage the roles from Google or keep the role management in Cheqroom. See Configure how roles are managed for SSO for more information.

  • User groups configuration This option is only available if you have created some user groups for your account, see Create User Groups

  • Click Next to go the the Attribute mappings step

  • Click Next to go the the Test connection step


Add custom attributes in Google

  • Log in to your Google account

  • Go to Directory > Users

  • Click More and then choose Manage custom attributes

  • Click Add custom attribute

  • Add custom attribute

    • For Category, we suggest that you fill in Cheqroom, this will allow you to have a clear overview of all custom attributes that are specifically added for the Cheqroom SAML application.

    • Next, enter the following information for the Role/User Group attribute:

      • Name: f.e Role

      • Info type: Text

      • Visibility: Visible to user and admin

      • Number of values: Single value

    • Click Add


Configure User Roles in Google

  • Log in to your Google account

  • Prerequisites:

  • Go to Directory > Users

  • Go to the user details of a user you want to specify a role for in the Cheqroom application

  • Click the User information section

  • Find the Role attribute in Cheqroom section and click Add Role

Optional if you haven’t configured the Cheqroom application yet to return cheqroom__role saml attribute

  • Go to Apps > Web and mobile apps > Cheqroom

  • Click the SAML attribute mapping section

  • Click Add mapping

  • Add Mapping:

    • Basic information: Role

    • App attributes: cheqroom__role

    • Click Save


Configure User Groups in Google

  • Log in to your Google account

  • Prerequisites:

    Use Multi-value if you want to assign multiple user groups in Google

  • Go to Directory > Users

  • Go to the user details of a user you want to user group(s) for in the Cheqroom application

  • Click the User information section

  • Find the User Group attribute in Cheqroom section and click Add User Group(s)

Optional if you haven’t configured Cheqroom application yet to return cheqroom__user_group saml attribute

  • Go to Apps > Web and mobile apps > Cheqroom

  • Click the SAML attribute mapping section

  • Click Add mapping

  • Add Mapping:

    • Cheqroom: User Group(s)

    • App attributes: cheqroom__user_group

    • Click Save


Troubleshooting Common Issues

Did this answer your question?