---
title: "Identity management at NewStore via Google Workspace"
slug: "identity-management-at-newstore-via-google-workspace-1"
tags: ["integration", "authentication", "platform", "sso", "google workspace"]
updated: 2024-12-10T15:55:38Z
published: 2024-12-10T15:55:38Z
canonical: "docs.newstore.com/identity-management-at-newstore-via-google-workspace-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.newstore.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Identity management via Google Workspace

## Pre-requisites

To set up an identity management application to manage authentication for NewStore apps, ensure that you have access to:

- Omnichannel Manager
- Google Workspace admin console

> [!NOTE]
> Important
> 
> To enable users from your corporate directory to be able to use the NewStore applications, you have to create users, assign them to a store, and assign relevant roles in NewStore.

## Setting up Google Workspace with NewStore

This process involves working with Google Workspace and Omnichannel Manager in tandem. Ensure you have access to both before you proceed.

1. Log into your Google Workspace and verify that every user has admin permissions.
2. Go to the `Admin` app.
3. In the `Google Admin` console, go to `Home > Apps > Web and mobile apps`.
4. Click `Add App` and select `Add custom SAML app` from the drop-down menu.
5. In the `App details` screen that appears, enter a name for this new app that is related to the NewStore environment name. For example, `NewStore Platform Staging`.

*(Optional)* Choose an icon for the new app.
6. Click `Continue`.
7. In the `Option 1: Download IdP metadata` screen that appears, click the `DOWNLOAD METADATA` button and save the XML file locally on your computer.
8. Click `Continue`.
9. Open `Omnichannel Manager` in a new tab.
10. Click `Settings` > `Users & Roles` > `Single Sign-On`.
11. Click `Configure Single Sign-On`.
12. Select Vendor `GOOGLE`.
13. Upload the XML file with IdP metadata from Step 7.
14. Click `Connect`.
15. Switch back to the `Google Workspace` tab.
16. In the `Service provider details` screen that appears, enter values for the following fields:
  - `ACS URL`: Paste the `ACS URL` value from the Omnichannel Manager tab.
  - `Entity ID`: Paste the `Entity ID` value from the Omnichannel Manager tab.
  - `Name ID format`: Select `EMAIL`.
  - `Name ID`: Select `Basic Information > Primary email`.

1. Click `Continue`.
2. In the `Attributes` screen that appears, select the Google directory attributes and specify their corresponding app attributes.
3. Click the `ADD MAPPING` button and add following attributes:

| `Google Directory attributes > Basic Information` | `App attributes` |
| --- | --- |
| `Primary email` | `email` |
| `First name` | `firstName` |
| `Last name` | `lastName` |
4. Click `Finish` to save the mappings.

Google Workspace is now successfully set up to work with NewStore apps on your side.

You have to repeat these steps for each NewStore environment that you want to set up.

### Enabling groups and users

1. Go to the `User access` section in the `NewStore Platform Staging` app.
2. Enable the app for the group or number of users that must be allowed to log into the specific NewStore environment.

Use the following options:

- `Allow access to everyone`
- `Allow access based on membership in a Group`
- `Allow access based on membership in an Organizational Unit`

After you have decided about the groups or number of users, select them and activate the service for them.

> [!TIP]
> Note
> 
> - Google refers to the `App` as a `service` in this scenario.
> - Ensure that `User access` is not to set to `OFF for everyone`, which prevents users from logging into the NewStore applications.

## Updating configured SSO with Google Workspace in Omnichannel Manager

1. Log into your Google Workspace and verify that every user has admin permissions.
2. Go to the `Admin` app.
3. In the `Google Admin` console, go to `Home > Apps > Web and mobile apps`.
4. Click on `Service provider details`
5. Click on `Manage certificates`
6. Click `ADD CERTIFICATE`
7. You should have 2 certificates. Download the `.pem` file of the newly created certificate.

![](https://cdn.document360.io/c2d22fcd-a44b-4e1e-bf3a-84f0ffba0dbe/Images/Documentation/bea22810-3575-494a-a28f-1516f948661a.png)
8. Open `Omnichannel Manager`.
9. Click `Settings` > `Users & Roles` > `Single Sign-On`.
10. Click on the displayed name `GOOGLE`.
11. Click `Replace file` and upload the `.pem` file you downloaded from Google Workspace in step 7.

> [!NOTE]
> Important
> 
> Ensure that this certificate exists and is valid in Google Workspace. There is no way to revert after updating the certificate.
12. Click `Update`.
13. Click `Confirm`.

You have successfully rotated your certificate.

**Related topics**

- [Configuring identity and access management](/v1/docs/configuring-identity-and-access-management#config-identity-management)
- [Identity management at NewStore via Okta](/v1/docs/identity-management-at-newstore-via-okta#sso-okta)
- [Identity management at NewStore via Microsoft Azure Active Directory](/v1/docs/identity-management-at-newstore-via-microsoft-entra-active-directory#sso-microsoft-entra)