SAML Admin Authentication

Create a SAML App in Google Admin Console

Click on "SAML Apps"

Click "Add a service/App to your domain"

Click "Setup My Own Custom App"

Copy the SSO URL, and click "Next"

Give the Application a Unique Name. Optionally provide a description and custom logo, then Click "Next"

Create a new SSO Strategy in rXg

On the rXg, navigate to System::Admins. Create a new SSO Strategy. Paste the SSO URL Copied Earlier.

After clicking "Create", wait for the webserver to restart. Click "Show" on the SSO Strategy.

Copy the OAuth Redirect URLs (this is needed in the Google Admin Console).

Click on the Oauth Metadata URLs and locate the "entityID" field. (This is also needed in the Google Admin Console)

Finish SAML App in Google Admin Console

Provide the Redirect URL from above as the ACS URL. Also provide the Entity ID, and click "Next".

Create Attribute Mappings for all desired attributes. This example shows first_name and last_name. Additional custom attributes will be added, and mapped in later steps. Once complete click "Finish"

The new SAML App will be created disabled by default. Make sure to turn the App on for it to function.

Add Custom Attributes to GSuite Users

Navigate to "Users" in the Google Admin Console, and choose "Manage Custom Attributes" under the More dropdown menu.

Click on "Add a Custom Attribute" and provide a category name. Create a field for each custom attribute you want to provide. In this example an attribute field of admin_role will be used to assign an Administrative Role on the rXg.

Edit a user to see the new Custom Attributes category, along with the defined fields. Populate the field with the name of an Administrative Role on the rXg.

Return to the SAML Application settings in the Google Admin Console, and add an attribute mapping for any custom attributes that have been added.

Log in Using SAML

You can now see a SAML login option available on the admin login portal.

Alternatively, an app is available in the list of Google Apps, that will immediately take you to the rXg administrative interface, as the user logged in to Google.