Google SSO

​

Prepare the SSO form in Minimus

1. Open the Minimus SSO form. You can use this direct link or navigate as follows: Go to Manage > Users & Groups. Then click Configure SSO at the top of the page.
   Keep this form open and available in another browser tab as you configure the SAML app in Google.
2. The form has 3 parts:
   1. Configure Minimus as a custom app in your identity provider - You will copy these parameters from Minimus to Google in the next steps.
      1. SP Entity ID
      2. Reply URL (Callback / ACS URL)
      3. Relay State (optional) - If you leave the Relay State blank, users will only be able to login with SSO from the Minimus homepage.
   2. Connect Minimus to your identity provider - You will fetch these parameters from your Google custom app and save them to the Minimus form.
      1. Login SSO URL
      2. IdP Entity ID
      3. Certificate
   3. SAML Attribute Mapping - Google uses the standard AD claim formats.
      1. Email - input email (in lowercase).
      2. Full name - input firstName (Note the camel case).
      3. Group mapping

​

Add Minimus as a custom app in Google

1

Add custom SAML app in the Google console

1. Login to your Google Workspace Admin Console.
2. In the left-menu, go to Apps > Web and mobile apps
3. Select the option +Add app >Add custom SAML app
   

2

Fill out the general details of your custom app

Fill out the App details:

1. Name the application. (We’ll assume the name Minimus App was used for the rest of this guide.)
2. (Optional) Add a description.
3. (Optional) Upload the Minimus logo to help your team identify the app in their app gallery. (This is not required but highly recommended.)
4. Continue to the next step.

3

Copy Google metadata to Minimus form

Copy the metadata from Google to Minimus:

1. Open the Minimus SSO form in another browser tab. You can use this direct link or navigate as follows: Go to Manage > Users & Groups. Then click Configure SSO at the top of the page.
2. Copy the following parameters from Google to Minimus:

Copy from Google	Paste in Minimus
SSO URL	Login URL
Entity ID	IdP Entity ID
Certificate	Certificate

You can also download the details if you prefer.

Continue to the next step.

4

Configure service provider details

1. Copy the following service provider details from Minimus to Google:

   Minimus form	Google form	Notes
   Reply URL	ACS URL	-
   SP Entity ID	Entity ID	-
   Relay State	Start URL	Required to enable users to login via Google apps. If left blank, users will only be able to login with SSO from the Minimus homepage.

2. Continue to the next step.

5

Configure attribute mapping in Google

1. Under SAML Attribute mapping, map the Google Directory attributes to the Minimus app attributes:

   Google Directory Attribute	App attribute
   Select Primary email from the dropdown list	Input email
   Select First name from the dropdown list	Input firstName

2. Select Finish to confirm the configuration.

6

Fill out SAML Attribute Mapping in Minimus

Back in the Minimus SAML form, fill out the following under Step 3: SAML Attribute Mapping:

Minimus Parameter	Input to type in
Email	email
Full name	fullName

If you plan to use groups, enable Step 4: Group Mapping. This step is optional. It is only relevant if you intend to configure group roles.

• Type: Google / Okta / Other (This should already be selected by default).
• Group Mapping: Type in groups to match the attribute expression from the previous step.

7

Save the Minimus SSO form

You are now ready to save the SSO configuration form in Minimus to complete the configuration.

​

Turn on access to the Minimus App

1. Login to your Google Workspace Admin Console.
2. In the left-menu, go to Apps > Web and mobile apps.
3. Select the Minimus App from the list.
4. Expand the User Access window.
   
5. Select the state ON for everyone.
   
6. Save the changes. That’s it. You’re all set.

​

Troubleshooting SSO access

-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----