Identity management via Google Workspace

  • Updated on Dec 10, 2024
  • Published on Oct 1, 2024
  • 2 minute(s) read
Prev Next

Pre-requisites

To set up an identity management application to manage authentication for NewStore apps, ensure that you have access to:

  • Omnichannel Manager

  • Google Workspace admin console

Important

To enable users from your corporate directory to be able to use the NewStore applications, you have to create users, assign them to a store, and assign relevant roles in NewStore.

Setting up Google Workspace with NewStore

This process involves working with Google Workspace and Omnichannel Manager in tandem. Ensure you have access to both before you proceed.

  1. Log into your Google Workspace and verify that every user has admin permissions.

  2. Go to the Admin app.

  3. In the Google Admin console, go to Home > Apps > Web and mobile apps.

  4. Click Add App and select Add custom SAML app from the drop-down menu.

  5. In the App details screen that appears, enter a name for this new app that is related to the NewStore environment name. For example, NewStore Platform Staging.

    (Optional) Choose an icon for the new app.

  6. Click Continue.

  7. In the Option 1: Download IdP metadata screen that appears, click the DOWNLOAD METADATA button and save the XML file locally on your computer.

  8. Click Continue.

  9. Open Omnichannel Manager in a new tab.

  10. Click Settings > Users & Roles > Single Sign-On.

  11. Click Configure Single Sign-On.

  12. Select Vendor GOOGLE.

  13. Upload the XML file with IdP metadata from Step 7.

  14. Click Connect.

  15. Switch back to the Google Workspace tab.

  16. In the Service provider details screen that appears, enter values for the following fields:

    • ACS URL: Paste the ACS URL value from the Omnichannel Manager tab.

    • Entity ID: Paste the Entity ID value from the Omnichannel Manager tab.

    • Name ID format: Select EMAIL.

    • Name ID: Select Basic Information > Primary email.

  1. Click Continue.

  2. In the Attributes screen that appears, select the Google directory attributes and specify their corresponding app attributes.

  3. Click the ADD MAPPING button and add following attributes:

    Google Directory attributes > Basic Information

    App attributes

    Primary email

    email

    First name

    firstName

    Last name

    lastName

  4. Click Finish to save the mappings.

Google Workspace is now successfully set up to work with NewStore apps on your side.

You have to repeat these steps for each NewStore environment that you want to set up.

Enabling groups and users

  1. Go to the User access section in the NewStore Platform Staging app.

  2. Enable the app for the group or number of users that must be allowed to log into the specific NewStore environment.

Use the following options:

  • Allow access to everyone

  • Allow access based on membership in a Group

  • Allow access based on membership in an Organizational Unit

After you have decided about the groups or number of users, select them and activate the service for them.

Note

  • Google refers to the App as a service in this scenario.

  • Ensure that User access is not to set to OFF for everyone, which prevents users from logging into the NewStore applications.

Updating configured SSO with Google Workspace in Omnichannel Manager

  1. Log into your Google Workspace and verify that every user has admin permissions.

  2. Go to the Admin app.

  3. In the Google Admin console, go to Home > Apps > Web and mobile apps.

  4. Click on Service provider details

  5. Click on Manage certificates

  6. Click ADD CERTIFICATE

  7. You should have 2 certificates. Download the .pem file of the newly created certificate.

  8. Open Omnichannel Manager.

  9. Click Settings > Users & Roles > Single Sign-On.

  10. Click on the displayed name GOOGLE.

  11. Click Replace file and upload the .pem file you downloaded from Google Workspace in step 7.

    Important

    Ensure that this certificate exists and is valid in Google Workspace. There is no way to revert after updating the certificate.

  12. Click Update.

  13. Click Confirm.

You have successfully rotated your certificate.

Related topics