Configuring Google Workspace for SAML Authentication

Please note: The instructions listed in this article are exclusively applicable to those who have had SAML Single Sign-On activated for their company by Aircall. To have SAML Single Sign-On activated for your company, please contact your Account Manager. Please note that, at this time, this functionality is only offered for a limited number of customers.

______________________________

Step 1: Create a Custom SAML app

1. Sign in to your Google Admin console
   • Sign in using an account with super administrator privileges (does not end in @gmail.com)
2. In the Admin console, go to Menu > Apps > Web and mobile apps

Step 2: Configure New SAML Application

1. Click Add App > Add custom SAML app
   • Enter the app name (e.g. acme-saml-aircall)
   • (Optional) upload an icon for your app.
2. Click Continue
3. In the Service Provider Details window, enter:
   • ACS URL: https://sso.aircall.io/saml2/idpresponse
   • Entity ID: urn:amazon:cognito:sp:us-west-2_hZkGBmIsz
4. In the Name ID window, enter:
   • Name ID format: UNSPECIFIED
   • Name ID: Basic Information > Primary email
5. Click Continue
6. Click Add mapping enter the following values:
   • Google Directory attributes: Primary email
   • App attributes: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
7. Click Finish

Step 3: Export Metadata

1. Click on acme-saml-aircall(the name used in the first step) SSO application
   • Click on DOWNLOAD METADATA