How to Configure Single Sign-on for Google Workspace

Overview

This page explains the steps to configure Single Sign-on (SSO) using Google Workspace to log in to Josys.

Setting Up the Integration

1. Log in to the Google Workspace Admin Console and select Apps > Web and mobile apps.
2. Click Add App > Add custom SAML app.
3. Configure the following in the wizard that appears next.
   First, enter any app name. Example: Josys
4. Click "Continue" at the bottom right of the screen.
5. Open Josys and click Settings > Single Sign-on.
6. Click the "Configure SSO" button.
7. Since "Okta" is selected by default on the Josys side, select "Others (SAML 2.0 IdPs only)".
   
8. Copy and paste the details from Option 2 displayed on the Google side into the Josys side.
   Google SSO URL: IdP Login URL on the Josys side
   Google Entity ID: IdP Entity ID on the Josys side
9. Click "Continue" at the bottom right of the screen.
10. Proceed to configure the Service Provider details. Copy and paste the information from the Josys side.
    Google ACS URL: ACS URL on the Josys side
    Google Entity ID: Entity ID on the Josys side
11. Select and configure the following items.
    Google Name ID format: EMAIL
    Name ID: Basic Information > Primary email
12. Once you proceed to the next page, do not change any settings and click "Finish" at the bottom right.

Configuring User Access

1. Once the screen transitions, click "User Access".
2. Under Service status, click "ON for everyone".
3. Click "Save" at the bottom right.

Downloading Metadata

1. Click "Download Metadata" on the left side of the screen.
2. Copy the "Certificate" displayed in Option 2.
3. Return to Josys and paste it into "Certificate".
4. After entering the information, click Save at the bottom right of the Josys SSO configuration pop-up.

Testing the Integration

Josys Admin Console

1. Open Josys and click Settings > Single Sign-on.
2. Click "Test Connection".
3. The setup is complete once the SAML connection test results are displayed.

Josys Employee Portal

1. Click "Settings > Employee Portal" in the left sidebar of the Josys admin screen.
2. Click the Single Sign-on tab.
3. Click the three-dot menu (...) and click "Test Connection".
   
4. The setup is complete once the test results are displayed.

Frequently Asked Questions

• Q: After logging out of SSO (Google Workspace), when I try to log in as a different user, it automatically logs me in as the previous user.

  A: This behavior is due to the specifications of Google SSO / OAuth. Even if you log out of Josys, the Google session (login information) remains in the browser, so the same Google account will be reused for the next login (without requiring you to re-enter the password).

  If multiple people are using a shared PC, please take one of the following measures to prevent accidental operations on other users' accounts:

  • In addition to logging out of Josys, log out of your Google account as well.
  • Use the browser's incognito window (private browsing).
  • Use different browser profiles for each user.