Add single-sign-on (SSO) to Minimus in Google Workspace Admin Console, by configuring Minimus as a custom SAML app.

​
Prepare the SSO form in Minimus

  1. Open the Minimus SSO form. You can use this direct link or navigate as follows: Go to Manage > Users. Then click Configure SSO.

    Keep this form open and available in another web browser tab as you configure the SAML app in Google.

  2. The form has 3 parts:

    1. Configure Minimus as a custom app in your identity provider - You will copy these parameters from Minimus to Google in the next steps.
      1. SP Entity ID
      2. Reply URL (Callback / ACS URL)
      3. Relay State (optional) - If you leave the Relay State blank, users will only be able to login with SSO from the Minimus homepage.
    2. Connect Minimus to your identity provider - You will fetch these parameters from your Google custom app and save them to the Minimus form.
      1. Login SSO URL
      2. IdP Entity ID
      3. Certificate
    3. SAML Attribute Mapping - Google uses the standard AD claim formats.
      1. Email - input email (in lowercase).
      2. Full name - input firstName (Note the camel case).

​
Add Minimus as a custom app in Google

1

Add custom SAML app

  1. Login to your Google Workspace Admin Console.

  2. In the left-menu, go to Apps > Web and mobile apps

  3. Select the option +Add app >Add custom SAML app

2

Fill in the general details of the custom app

Fill in the App details:  

  1. Name the application. (We’ll assume the name Minimus App was used for the rest of this guide.)
  2. (Optional) Add a description.  
  3. (Optional) Upload the Minimus logo to help your team identify the app in their app gallery. (This is not required but highly recommended.)  
  4. Continue to the next step. 
3

Copy Google metadata to Minimus

Copy the metadata from Google to Minimus: 

  1. Open the Minimus SSO form in another browser tab. You can use this direct link or navigate as follows: Go to Manage > Users. Then click Configure SSO.
  2. Copy the following parameters from Google to Minimus: 
Copy from GooglePaste in Minimus
SSO URLLogin URL
Entity IDIdP Entity ID
CertificateCertificate

You can also download the details if you prefer.

Continue to the next step.

4

Configure service provider details

  1. Copy the following service provider details from Minimus to Google:

    Minimus formGoogle formNotes
    Reply URLACS URL-
    SP Entity IDEntity ID-
    Relay StateStart URLRequired to enable users to login via Google apps. If left blank, users will only be able to login with SSO from the Minimus homepage.

  2. Continue to the next step.

5

Configure attribute mapping

  1. Under SAML Attribute mapping, map the Google Directory attributes to the Minimus app attributes:

    Google Directory AttributeApp attribute
    Select Primary email from the dropdown listInput email
    Select First name from the dropdown listInput firstName

  2. Select Finish to confirm the configuration.

6

Save the Minimus SSO form

You are now ready to save the SSO configuration form in Minimus to complete the configuration.

​
Turn on access to the Minimus App

In Google Workspace, user access is turned off by default for newly-added apps. Here’s how to turn it on.

  1. Login to your Google Workspace Admin Console.
  2. In the left-menu, go to Apps > Web and mobile apps.
  3. Select the Minimus App from the list. 
  4. Expand the User Access window.
  5. Select the state ON for everyone.
  6. Save the changes. That’s it. You’re all set.

Note that changes made in Google Workspace Admin Console usually take a few minutes to take effect. Wait a few minutes before testing access to your newly created Minimus app.

​
Troubleshooting SSO access

When copying the certificate to Minimus, make sure there is no whitespace before or after the certificate. Also, check that the expected prefix and suffix are included.

-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----