Prerequisites
Claromentis to Install the login handler module
Step 1
Once the Login Handler module has been installed - The following URL and Attribute configuration will need to be applied within your Claromentis Google application control panel:
https://example.myintranet.com
https://example.myintranet.com/custom/loginhandler/simplesaml/public/module.php/saml/sp/saml2-acs.php/claromentis
https://example.myintranet.com
App Attributes Google Directory Attributes username Primary email firstname First name surname Last name email Primary email
Note: The App Attribute values may be case sensitve so please ensure these are set correctly within your Google IDP.
Step 2
2. Scroll down to the IDP Configuration section and set the IDP Identifier to your IDP URL
3. In the Federation Metadata XML section select "choose file" and upload your Metadata.xml
Important: Please be very careful when making changes within the Admin panel and only make changes to the values we have asked (IDP Identifier and metadata.xml).
NameID Policy - Please confirm if this has been changed from the default setting, otherwise this can be remain set to "Unspecified".
If you have any issues with appling the IDP URL or metadata please let us know in the project or change request ticket you have open and we can assist you with this.
Step 3
Optional: Test the configuration and SSO - joint work between Claromentis and client. For Claromentis to perform this your team will need to configure a test user, configured like the below:
Google test user - username and password need to be provided, along with the following 3 attributes populated for this user:
1 - Firstname 2 - Lastname 3 - Email
IMPORTANT - Please ensure provisioned test users don't have 2FA enabled as this may stop us from testing and completing the work
Step 4
Test SSO and confirm you can log in successfully - claromentis to troubleshoot with your team if needed.
