Single Sign-On with Google Workspace
Logz.io offers a quick integration for SSO with Google Workspace.
Request SSO access from Logz.io
Only account admins can request single sign-on access for their accounts.
To set up your Google Workspace SSO, you'll first need to email help@logz.io and write that you want to set up Google Workspace SAML SSO for Logz.io.
Include these items in the message:
- Your Logz.io account ID
- The last six characters of your account token
The Support team will respond with the connection information needed to set up your Google Workspace SSO.
Set a custom SAML app in Google Workspace
Log into your Google Workspace panel.
In the sidebar, navigate to Apps > Web and mobile apps. Click on Add app and choose the Add custom SAML app option.
Name your application and click Continue. In the Google Identity Provider details screen, copy the Entity ID and download the certificate.
Continue to the next screen. Enter the ACS URL and Entity ID given to you by Logz.io support; change the Name ID format to EMAIL, and set the Name ID to Basic Information > Primary email.
Continue to the final screen. Edit the Google Directory attributes to Basic Information - Primary email, and set App attributes to email.
Click on Finish to add the custom SAML app.
Send your SAML details to Logz.io
Draft a new email to Support, and include these items:
- Your zipped SAML Signing Certificate (from the previous step).
- Your SAML SIGN-IN URL.
When Support has received the information and created your Google Workspace + Logz.io connection, you’re done! You can start logging in to Logz.io through your Google Workspace account.
Google Workspace SSO groups
When creating access groups for Google Workspace, you need to add a custom attribute to connect it to your Logz.io SAML application.
First, add a custom attribute and link it to your SAML app.
Open your SAML app, navigate to the SAML attribute mapping section, and click Configure SAML attribute mapping.
In the Attributes section, add the custom attribute you've just created and set the app attribute of your choice.
When using a Custom Attribute, you must update every user manually with a string.
Next, you can add Group membership information by selecting the relevant groups from your account.
Click Save to apply the changes.